PRIVACY POLICY
Orion’s Belt – Scholastro Pty Ltd
Effective Date: [Insert Date]
Scholastro Pty Ltd ("we," "us," "our") is committed to protecting the privacy of our users, including students, teachers, school administrators, and parents. This Privacy Policy explains how we collect, use, store, and protect personal data in compliance with Australian laws, including the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Notifiable Data Breaches (NDB) Scheme, and the ST4S (Safer Technologies for Schools) framework.
We collect only the data necessary for educational and school management purposes, including:
Student Data: Name, class records, grades, learning analytics, attendance, behavior reports.
Teacher & School Administrator Data: Name, email, school role, lesson plans, performance insights.
Parent/Guardian Data: Name, contact details, child’s academic reports.
System Usage Data: Login activity, device type, IP address (for security and troubleshooting).
Optional Data: User-submitted feedback and learning preferences.
We collect personal data through:
Direct input from users (e.g., registration, profile updates).
Automated tracking (e.g., performance analytics, system logs).
School-provided information via secure integrations.
Parental or teacher consent where required for students under 18.
Data is stored securely in Microsoft Azure data centers in Australia, with AES-256 encryption applied at rest and in transit.
We use collected data strictly for educational purposes, including:
Providing personalized learning experiences for students.
Automating teacher report writing, test marking, and lesson planning.
Generating performance insights and parental reports.
Enhancing platform security and compliance monitoring.
Conducting data analytics to improve educational outcomes.
We DO NOT sell, rent, or use personal data for advertising or non-educational purposes.
Data may be disclosed to schools, parents, or legal authorities where required under Australian law.
We work with third-party service providers (sub-processors) to support the Orion’s Belt platform. Below is a list of our sub-processors:
Microsoft Corporation (Azure Cloud Services)
Website: https://azure.microsoft.com
Purpose: Secure storage, hosting, and backup services.
Data Types: User authentication data, student records, teacher reports.
Lawful Basis: Necessary for service operation and data security.
Data Location: Australia (Primary), Backup in geographically distributed secure locations.
Stripe, Inc. (For subscription payments if applicable)
Website: https://stripe.com
Purpose: Payment processing for premium services.
Data Types: Transaction details, payment identifiers (no credit card storage).
Lawful Basis: Required for financial transactions under Australian Consumer Law.
Data Location: United States, Europe (with PCI-DSS and APP compliance).
We ensure that all sub-processors comply with Australian Privacy Laws (APPs), GDPR where applicable, and ST4S security standards.
Users have the right to:
Access their personal data stored on Orion’s Belt.
Correct inaccuracies in their data.
Request deletion of personal information.
Opt-out of non-essential data processing.
Requests can be made by contacting our Privacy Officer and will be processed within 30 days, subject to verification.
If you believe your privacy has been breached, you may submit a complaint to our Privacy Officer. We will:
Acknowledge receipt of the complaint.
Investigate the issue within 30 days.
Provide a resolution or refer the matter to the Office of the Australian Information Commissioner (OAIC) if required.
All data is stored in Australia to comply with local privacy laws.
If data must be transferred outside Australia, we will ensure compliance with APPs and Australian Government regulations.
Where applicable, we disclose personal data only to countries with adequate data protection laws or through legally binding agreements.
In case of a data breach, we will:
Contain and assess the breach.
Notify affected schools, users, and regulatory bodies (OAIC) if required.
Implement corrective security measures to prevent future incidents.
We may update this Privacy Policy periodically to reflect legal and regulatory changes. Schools, parents, and teachers will be notified of significant changes.
For privacy-related inquiries, requests, or concerns, contact our Privacy Officer:
Email: privacy@scholastro.com
By using Orion’s Belt, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
