Privacy Policy

How EduBI Analytics collects, uses, holds and discloses personal information. Effective 2 December 2024. Last updated 7 December 2025.

EduBI Analytics Pty Ltd (ACN 659 748 277) (“we”, “us” or “our”) is committed to protecting the privacy of personal information provided to us or otherwise collected by us, offline or online. This Privacy Policy explains how we collect, use, hold and disclose your personal information, and it applies to all interactions through our services, websites, platforms and associated apps (“Sites”).

We are committed to complying with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and other relevant laws. If you use our services, you agree to this Privacy Policy and consent to the collection, use and disclosure of your personal information as outlined below.

1. Availability of Privacy Policy

This Privacy Policy is:

  • Published free of charge on our website: edubi.com.au/privacy-policy.
  • Provided to users prior to their use of the service.
  • Available in other formats upon request.

2. What is Personal Information?

Personal information is any information or opinion about an identified individual, or an individual who can be reasonably identified from the information or opinion, regardless of whether it is true or recorded.

3. Types of Information We Collect

To provide our services, we may collect the following types of personal information.

3.1 Personal information

  • Personal details: name, date of birth, gender, contact details, educational history.
  • Family information: household member details, relationships, financial information.
  • Information about staff, volunteers and other members associated with educational institutions.

3.2 Sensitive information

We may collect sensitive information, such as health data or racial or ethnic origin, with explicit consent or as required by law.

3.3 Technical and usage information

  • Browser session and geo-location data, device information, network details, and browsing behaviour.
  • Data collected through tools like Google Analytics and Microsoft Azure.

3.4 Children’s information

We collect personal information about children and young people under 18 only with the consent of educational institutions.

4. How We Collect Personal Information

We collect personal information through:

  • Direct interactions with users.
  • Third parties, including educational institutions, software providers and testing organisations.
  • Automated technologies like cookies and analytics tools.

5. Why We Collect Personal Information

We collect, hold and use personal information for purposes including:

  • Providing and improving our services.
  • Assisting educational institutions with administration and reporting.
  • Conducting data verification, analytics and research.
  • Complying with legal and regulatory obligations.
  • Aggregating and de-identifying data for benchmarking and insights.

6. Disclosure of Personal Information

We may disclose your personal information to government authorities or regulators as required by law. We do not share personal information for any purposes other than those outlined above.

7. Sensitive Information Handling

Sensitive information is stored securely and used only:

  • With consent, for primary purposes.
  • When required or authorised by law.

8. Storage and Security

We use technical and organisational measures to protect personal information, including:

  • Encryption for data in transit and at rest.
  • Two-factor authentication.
  • Regular security audits.

Despite our best efforts, no method of transmission over the internet is completely secure.

9. International Data Compliance

We comply with international privacy regulations, including the GDPR and the Privacy Act 2020 in New Zealand. Data is stored and processed within the user’s nominated region and not transferred outside that region without explicit consent.

10. Data Breaches

If a data breach occurs, we will:

  • Notify affected individuals and relevant authorities as required by the Notifiable Data Breaches Scheme.
  • Take remedial steps to mitigate harm.

11. User Rights

Users can access their personal information, and request corrections or deletion of their data. We process such requests free of charge and resolve them within three months.

12. Subprocessors

We use subprocessors to assist with service delivery. Information about subprocessors, including their names, contact details and the data types they process, is available upon request.

13. No Discovery Functionality

Our services do not include functionality that allows data discovery or sharing between educational institutions.

14. Notification of Updates

We will notify users of updates to this Privacy Policy by:

  • Posting changes on our website.
  • Requiring users to explicitly agree to updated terms before continuing service use.

15. Complaints

If you have a complaint about our handling of personal information, contact our Privacy Officer at:

EduBI Analytics Privacy Officer

Email: [email protected]

Mail: PO Box 626, Kellyville NSW 2155

If you are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

16. Contact Us

For questions, comments or concerns, contact us at:

Email: [email protected]

Mail: PO Box 626, Kellyville NSW 2155

17. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.