Effective Date: 2nd December 2021
Last Updated: 2nd December 2021
Privacy Policy
EduBI Analytics Pty Ltd (ACN 659 748 277) (“we,” “us,” or “our”) is committed to protecting the privacy of personal information provided to us or otherwise collected by us, offline or online. This Privacy Policy explains how we collect, use, hold, and disclose your personal information, and it applies to all interactions through our services, websites, platforms, and associated apps (“Sites”).
We are committed to complying with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other relevant laws. If you use our services, you agree to this Privacy Policy and consent to the collection, use, and disclosure of your personal information as outlined below.
1. Availability of Privacy Policy
This Privacy Policy is:
- Published free of charge on our website: https://edubi.com.au/privacy-policy/.
- Provided to users prior to their use of the service.
- Available in other formats upon request.
2. What is Personal Information?
Personal information is any information or opinion about an identified individual or an individual who can be reasonably identified from the information or opinion, regardless of whether it is true or recorded.
3. Types of Information We Collect
To provide our services, we may collect the following types of personal information:
3.1 Personal Information
- Personal details: Name, date of birth, gender, contact details, educational history.
- Family information: Household member details, relationships, financial information.
- Information about staff, volunteers, and other members associated with educational institutions.
3.2 Sensitive Information
We may collect sensitive information, such as health data or racial/ethnic origin, with explicit consent or as required by law.
3.3 Technical and Usage Information
- Browser session and geo-location data, device information, network details, and browsing behaviour.
- Data collected through tools like Google Analytics and Microsoft Azure.
3.4 Children’s Information
We collect personal information about children and young people under 18 only with the consent of educational institutions.
4. How We Collect Personal Information
We collect personal information through:
- Direct interactions with users.
- Third parties, including educational institutions, software providers, and testing organizations.
- Automated technologies like cookies and analytics tools.
5. Why We Collect Personal Information
We collect, hold, and use personal information for purposes including:
- Providing and improving our services.
- Assisting educational institutions with administration and reporting.
- Conducting data verification, analytics, and research.
- Complying with legal and regulatory obligations.
- Aggregating and de-identifying data for benchmarking and insights.
6. Disclosure of Personal Information
We may disclose your personal information to:
- Educational institutions for service delivery.
- Third parties providing IT, legal, or other professional services.
- Government authorities or regulators as required by law.
We do not share personal information for any purposes other than those outlined above.
7. Sensitive Information Handling
Sensitive information is stored securely and used only:
- With consent for primary purposes.
- When required or authorized by law.
8. Storage and Security
We use technical and organizational measures to protect personal information, including:
- Encryption for data in transit and at rest.
- Two-factor authentication.
- Regular security audits.
Despite our best efforts, no method of transmission over the internet is completely secure.
9. International Data Compliance
We comply with international privacy regulations, including the GDPR and the Privacy Act 2020 in New Zealand. Data is stored and processed within the user’s nominated region and not transferred outside that region without explicit consent.
10. Data Breaches
If a data breach occurs, we will:
- Notify affected individuals and relevant authorities as required by the Notifiable Data Breaches Scheme.
- Take remedial steps to mitigate harm.
11. User Rights
Users can:
- Access their personal information.
- Request corrections or deletion of their data.
We process such requests free of charge and resolve them within three months.
12. Subprocessors
We use subprocessors to assist with service delivery. Information about subprocessors, including their names, contact details, and data types processed, is available below.
| Subprocessor | Contact | DataTypes | Purpose | Stored |
| Microsoft Azure | Azure.com | Extracted Customer Data | Requested Analytics | Australia East |
| Hubspot | hubspot.com | Contact Information | Customer Relationships | AWS (Various) |
| Xero | xero.com.au | Quotes, Transactions | Internal accounting | AWS (US) |
| Airtable | airtable.com | Contact information | Solution Support | AWS (US) |
13. No Discovery Functionality
Our services do not include functionality that allows data discovery or sharing between educational institutions
14. Notification of Updates
We will notify users of updates to this Privacy Policy by:
- Posting changes on our website.
- Requiring users to explicitly agree to updated terms before continuing service use.
15. Complaints
If you have a complaint about our handling of personal information, contact our Privacy Officer at:
EduBI Analytics Privacy Officer
- Email: [email protected]
- Mail: PO Box 626, Kellyville NSW 2155
If unsatisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.
16. Contact Us
For questions, comments, or concerns, contact us at:
- Email: [email protected]
- Mail: PO Box 626, Kellyville NSW 2155
17. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.