Privacy policy

Last updated: 9 November 2026 (training register and emailed guides added)

The Trustee for Bishop Family Trust trading as SafeLee (ABN 99 350 997 337) (“we”) runs safelee.au. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

When you send an enquiry we collect your name, organisation, role, email address, country, number of workers, languages your workers speak, topics of interest and your message.

When your organisation subscribes, we set up client portal accounts for the people it nominates. For each portal user we hold their name, work email address and password. Passwords are stored in scrambled (hashed) form, so we can’t see them.

Through the portal we also hold your organisation’s details: its name, the state or country whose safety laws apply, the languages your workers speak, the learning management system (LMS) you use, and the logos you upload. We also keep the requests you send through the portal and a record of who sent each one.

Training in your LMS

If your organisation plays our training through its own LMS, your LMS holds your workers’ training records, and they’re your organisation’s records. Our courses run through SCORM Cloud, a course delivery service run by Rustici Software in the United States, which records whether each episode has been watched. We set it up so that learner names and IDs from your LMS are scrambled (hashed) before they’re stored. If your organisation uses an LMS, we don’t receive your workers’ names or email addresses. Quiz answers are recorded in your LMS along with the rest of each worker’s training record.

Training records we hold for your employer

If your organisation uses the SafeLee training register instead of an LMS, we hold workers’ training records on its behalf. For each worker these are:

  • the details your organisation gives us: first name, last name and work email;
  • the training they’ve done: the episodes and versions, the time watched, their quiz answers, their acknowledgement and the dates.

We use this information only to provide the training register to your organisation, and we act on its instructions. Your organisation’s administrators can see and export it. We don’t use it for marketing, and we don’t contact workers except to send a training link that your organisation asks us to send.

Training records can’t be changed once made, so they can be relied on as evidence of training. When your organisation’s subscription ends, we send it a full export within 30 days and delete the records within 90 days.

If you’re a worker and want to see or correct your training record, ask your employer first. You can also contact us at hello@safelee.au.

Emailing your safe work guides

At the end of a training pack, you can choose to have its safe work guides emailed to you. We use the address you type in to send that one email. We don’t store it in our systems or add it to any list. Our email delivery service (Brevo) keeps a delivery log, including the address, for one month, then deletes it automatically.

Video streaming

Our videos are streamed by Bunny.net, which processes your IP address and basic device information to deliver the video and to stop it being played outside safelee.au and your LMS.

Why

To respond to your enquiry, to provide information about our services and, if you become a subscriber or partner, to manage that relationship. For subscribers, we use portal information to give your team access, brand videos with your logo, deliver training to your LMS, act on your requests and manage your subscription. We email portal users about their account (for example, setting a password) and about their organisation’s subscription.

Analytics

We use Google Analytics 4 to understand how people use the site. It uses cookies and collects information such as pages visited, device type and approximate location. It doesn’t identify you by name. You can block cookies in your browser settings. The client portal also uses a cookie to keep you signed in. The portal doesn’t work without it.

Spam protection

Our forms use Cloudflare Turnstile, which processes limited technical information to check that a real person is submitting the form.

Sharing

We don’t sell personal information. We share it only with service providers who help us run the site and email, and only as needed for that purpose. These include our website host, email provider, email delivery service (Brevo), video streaming service and course delivery service. Some of these providers store data outside Australia, including in the United States and Europe.

Security and how long we keep it

Portal pages are only available to signed-in users from your organisation, and each organisation sees only its own information. Video links are signed and expire. We keep portal accounts and organisation details while your organisation subscribes, and delete them within 90 days after the subscription ends, unless we must keep a record for legal or tax reasons. Your organisation can ask us to remove a portal user at any time.

Access and correction

You can ask to see or correct the information we hold about you by emailing hello@safelee.au.

Complaints

Contact us first at hello@safelee.au. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).