Privacy Policy
Last updated October 2026
Draft — this policy is under review and will be finalised before classes begin.
[BrandName] respects your privacy and handles personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). We collect only what we need to run our classes.
What we collect
- Parents: name, email, phone number and billing details (payments are processed by Stripe — we never see full card numbers).
- Students: first name, last name, year level, school (optional), username, attendance, homework and progress notes.
- Enquiries and tutor applications: the details you submit in our forms.
- Class recordings, made with consent.
- Basic website usage data (such as pages visited) to improve our website.
How we use it
- To deliver classes, manage enrolments and take payments.
- To share attendance, homework and progress with parents.
- To respond to enquiries and send important updates about classes.
- To keep students safe and meet our legal obligations.
- To send occasional news and resources — you can unsubscribe at any time.
Who can see it
- Tutors see only students' first names and class information — never parents' or students' contact details.
- Our staff see what they need to run classes and support families.
- We use trusted service providers to operate: database and login hosting (Supabase, hosted in Sydney), payments (Stripe), email (Resend), customer relationship management (HubSpot), online classrooms and website hosting (Cloudflare). Some of these providers may store or process data outside Australia.
- We never sell personal information.
Security and retention
- Data is protected with access controls so each person sees only what they are permitted to. Staff and tutor accounts use two-step login.
- We keep information only as long as needed for the purposes above or as required by law, then delete or de-identify it.
Your choices
You can ask to access or correct your information, or ask us to delete it, by emailing hello@example.com. If you have a privacy concern, contact us first; if we can't resolve it, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).