Online Privacy Statement

This statement explains how the University of Melbourne (University, we, us) collects and manages personal information when you visit our websites and digital services. This statement should be read together with our Privacy Policy and other statements available on our Privacy webpage.

When you follow links to external websites, those sites are not controlled by the University and this statement does not apply. You should review the privacy policies of those websites.

Privacy legislation

We manage personal information in accordance with applicable privacy laws, including:

• the Privacy and Data Protection Act 2014 (Vic)
• the Privacy Act 1988 (Cth), including amendments introduced by the Privacy and Other Legislation Amendment Act 2024 (Cth)
• the Health Records Act 2001 (Vic)
• other Australian and international laws where they apply

For the purposes of this statement:

• personal information means information or an opinion about an identified or reasonably identifiable individual
• processing refers to how we collect, use, store and manage personal information

What we collect and how

We collect personal information when you interact with our websites and digital services.

Information you provide directly

You may provide personal information when you:

• complete online forms (e.g. event registrations or enquiries)
• subscribe to communications
• interact with University systems

We explain the specific purpose of collection at the time of collection through relevant privacy notices.

Information we collect automatically

When you use our websites, we automatically collect information about your use of our services. This may include:

• pages you visit and time spent on those pages
• general location information (e.g. region)
• device and browser type
• general usage patterns and interactions

Cookies and tracking technologies

We use cookies and similar tracking technologies (including tracking pixels and analytics tools) to collect information about how our websites are used. These technologies help us to:

• ensure websites function effectively
• understand user behaviour and engagement
• remember your preferences
• improve performance and user experience

Some technologies allow us to link information across pages, sessions or devices.

In some cases, this may involve the use of secure identifiers, such as encrypted or hashed values derived from your contact details.

Use of Customer Data Platform (CDP)

We use a Customer Data Platform (CDP) to better understand how users interact with our websites and digital services. This may involve:

• combining information from different sessions or devices
• recognising returning users using secure identifiers
• understanding engagement across University services

In some cases, identifiers may be generated or collected when you access secure areas of our websites (such as logging in to University systems).

We take steps to ensure that:

• identifiers do not directly reveal your identity
• data is handled in accordance with applicable privacy laws
• appropriate safeguards are in place

Why we collect your information

We collect and use information about your interactions with our websites to:

• provide and maintain our digital services
• improve performance and functionality
• understand user behaviour and engagement
• personalise content and communications
• support marketing and recruitment activities (where permitted by law)
• support security monitoring and protect against cyber threats

How we use and disclose personal information

We will only use or disclose personal information:

• for the purpose for which it was collected
• for related purposes you would reasonably expect
• with your consent
• where required or permitted by law

We may also use service providers to assist us in delivering our digital services (see below).

Who we share your information with

We may share personal information with contracted service providers that support our operations, including:

• website hosting and analytics providers
• digital engagement tools
• our Customer Data Platform, which helps us analyse user engagement across devices

We do not sell personal information or permit third parties to on-sell information we provide.

We will not otherwise disclose your personal information without your consent unless required or authorised by law.

Advertising and third-party services

We may use third-party services (such as analytics and advertising platforms) to:

• understand website usage
• measure the effectiveness of communications
• deliver relevant advertising

These providers may use cookies or similar technologies to collect information about your interactions with our websites and other services.

Managing cookies and preferences

You can manage your cookie preferences through the cookie consent banner available on our websites. You can also adjust your browser settings to restrict or block cookies.

Please note that some cookies are necessary for website functionality and security. Disabling certain cookies may affect how websites operate.

Further information about third-party cookies and opt-out options is available through external services such as the Network Advertising Initiative and Digital Advertising Alliance.

Security, storage and retention

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification or disclosure. This includes technical and organisational safeguards, staff training, and access controls.

Personal information may be stored in systems located in Australia or overseas. Where personal information is transferred outside Victoria or Australia, we take reasonable steps to ensure it is handled in accordance with applicable privacy laws.

We retain personal information only for as long as required and dispose of it securely in accordance with our records management obligations.

Your rights

You may:

• request access to personal information we hold about you
• request correction of your personal information
• withdraw consent where processing is based on consent

Requests can be made through relevant University services or via Stop 1.

If required, access requests may be handled under the Freedom of Information Act 1982 (Vic).

Contact and complaints

The University’s Privacy and Data Protection Officer is the University Secretary. For privacy enquiries or complaints, contact the University’s privacy team via our Privacy webpage.

If you are not satisfied with our response, you may lodge a complaint with:

• Office of the Victorian Information Commissioner
• Health Complaints Commissioner (for health information)
• another relevant privacy regulator

Updates to this statement

We may update this statement from time to time. The most recent substantive update was made on 27 August 2026.