1. Information We Collect

We may collect the following types of personal information:

• Identity information: Full name, email address, phone number, and account credentials.
• Child/student information: Student’s first name (or alias), year level, state/territory, and school (optional).
• Payment information: Billing name and address. Card details are processed securely by Stripe — we never store, access, or transmit card numbers.
• Usage data: Tests taken, scores, time spent, progress reports, pages visited, and feature interactions.
• Device & technical data: IP address, browser type, device type, operating system, referral URLs, and session duration.
• Communication data: Emails, support requests, feedback, and survey responses you send to us.

2. How We Collect Information

• Directly from you when you create an account, purchase a product, or contact us.
• Automatically through cookies, analytics tools, and server logs when you use our platform.
• From third-party services such as payment processors (Stripe) and analytics providers (Google Analytics).

3. Purpose of Collection

We collect and use your information for the following purposes:

• To create and manage your account and provide access to purchased materials.
• To personalise content based on the student’s year level, state, and exam type.
• To generate progress reports, analytics, and performance dashboards.
• To process payments and issue receipts.
• To communicate with you about your account, orders, and product updates.
• To improve our platform, content quality, and user experience.
• To comply with legal obligations and protect against fraud or misuse.
• To send marketing communications (with your consent — you may unsubscribe at any time).

4. Children’s Privacy

We take children’s privacy extremely seriously. Our platform is designed for use by students under parental or guardian supervision.

• We do not knowingly collect personal information directly from children under 13 without parental consent.
• Student accounts are created and managed by a parent, guardian, or authorised school administrator.
• We collect only the minimum information necessary to deliver our educational services (first name or alias, year level, test results).
• Student data is never sold, shared with third parties for marketing, or used for targeted advertising.
• Parents/guardians may request access to, correction of, or deletion of their child’s data at any time.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Essential cookies: Required for the platform to function (authentication, session management).
• Analytics cookies: Help us understand how visitors interact with our site (Google Analytics).
• Preference cookies: Remember your settings and personalisation choices.

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect platform functionality.

6. Disclosure of Information

We may share your information with:

• Payment processors: Stripe, for secure payment processing.
• Hosting & infrastructure providers: Cloud service providers that host our platform (data stored in Australia where possible).
• Analytics providers: Google Analytics, for aggregated usage insights.
• Schools: If a school licence is active, we may share student progress data with the authorised school administrator.
• Legal authorities: Where required by law, court order, or to protect our legal rights.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

7. Data Security

• All data is transmitted using TLS/SSL encryption.
• Passwords are stored using industry-standard hashing algorithms — we cannot see your password.
• Access to personal data is restricted to authorised personnel only.
• We conduct regular security reviews and follow industry best practices.
• Despite our best efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

• Account data is retained for as long as your account is active.
• If you close your account, we will delete or de-identify your personal data within 30 days, unless we are required by law to retain it.
• Payment records may be retained for up to 7 years for tax and accounting compliance under Australian law.
• Aggregated, anonymised usage data may be retained indefinitely for analytics and product improvement.

9. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or outdated information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Opt out: Unsubscribe from marketing communications at any time.
• Complain: Lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

10. Data Breach Notification

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988. We will take all reasonable steps to contain and remediate any breach.

11. Cross-Border Data Transfers

We primarily store data within Australia. Where data is processed by third-party service providers located overseas (e.g., Stripe in the USA), we ensure those providers comply with comparable privacy protections in accordance with APP 8.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, please contact our Privacy Officer:

• Email: admin@australianedu.au
• WhatsApp: +61-455123450
• Website: australianedu.au/contact