Privacy Policy

Last Updated: 15 October 2024

‍

Your privacy is important to us and so is being transparent about how we collect, use, and share information about you. This Privacy Policy explains our privacy practices for the activities described herein. Please read this Privacy Policy carefully to learn how we collect, use, disclose, store, and handle your personal information when you access our website or use any or our Services.  Any reference to ‘Edexia, ‘we’, ‘us’, ‘our’ or the ‘Company’ is a reference to Edexia Pty Ltd (ACN 676 224 892).

When you access our Website or use our Services you agree to the terms of this Privacy Policy.

Sometimes we will need to update our Privacy Policy so it may change from time to time. By continuing to use our Website or Services after we make any changes, you will be deemed to have accepted those changes, so it is important that you read this Privacy Policy in its entirety and check this Privacy Policy regularly for any updates.

‍

What is personal information?

‘Personal information’ is information we collect and hold which is identifiable as being about you.

This policy covers how we treat your information, including your personal information, that you provide when you access or use our services. Our services include Edexia, assessment marking and feedback assistant for schools and teachers using artificial intelligence. We are not responsible for and our services don’t extend to the services of any company we don’t own or control, or people that we don’t manage.

‍

Types of information we collect

So what types of personal information do we collect?

We collect personal information directly only when you provide it to us. The types of personal information we collect includes but is not limited to:

·         identifying information such as name

·         contact information such as mobile phone number and email address

·         your qualifications & study history including career preferences, 

·         your teaching curriculum

·         physical location

·         IP addresses, and

·         Nationality and work rights.

Any sensitive information you provide to us may be relevant to providing you with our services, and you acknowledge that we will use your sensitive information for this sole purpose. Your sensitive information will only be disclosed for another purpose where you would reasonably expect the sensitive information to be disclosed, and the disclosure is directly related to providing you with our services.

We may also collect personal information from you that you voluntarily disclose to us such as through surveys, responding to questionnaires or participating in other forms of research, which may include sensitive information.

It is important to note that all data you provide or upload to our platform remains your property. We act solely as a processor of this information to provide you with our services.

‍

Cloud-based Data Storage and Management of Files

• We use cloud-based data storage solutions for managing files uploaded by users to our services. 
• These documents are stored on Google Cloud, which helps us organise data in a structured manner using parent folders. 
• File names are solely used for storage purposes and are not processed or utilised in any other way.
• Access to these documents is restricted to ensure that users can only access their own uploaded data. 
• Users have the capability to delete their data safely and completely.
•  Data fetching is conducted by the parent folder rather than by file name, which enhances data retrieval processes and security. 
• The AI systems involved in managing these documents do not have knowledge of the file names; they only process the contents within the files. 

‍

Ways of collecting information

How do we collect information?

We have different ways of collecting information.

We collect your personal information directly from you, including when you:

• access or use our Website;
• subscribe to, purchase or use our Services;
• use our Services as an authorised user (for example, as an employee of one of our customers who provided you with access to our services) where we act as a controller of your personal information;
• sign up to receive marketing material including exclusive offers, promotions, or events;
• participate in surveys, competitions, promotions or request information or material from us;
• make inquiries about us or our Services or otherwise communicate with us by email, by telephone, in person, via the Website or otherwise; and
• apply to work with us or are engaged by us.

We may collect personal information about you which may be provided to us by a teacher or staff member working at a particular school to which we provide our Services.

We may collect personal information about you from publicly available sources (such as the Internet) and from third parties (such as mutual contacts, or if someone makes a purchase on your behalf, or your referees provided during the recruitment process if you apply for a job with us). 

Our websites and services may contain links to other websites, applications, platforms and services maintained by third parties. The information practices of these third parties, including the social media platforms that host our branded social media pages, are governed by their privacy statements, which you should review to better understand their privacy practices.

‍

How do you use cookies and analytics?

Certain information is collected automatically through your device, such as your computer address, computer type, operating system name and version, device manufacturer and model, language, Internet browser type and the websites you visit, including through cookies and analytics. We collect this information to analyse data, to track your experience on our Website and to improve the functionality and experience of Edexia products, services and our Website.

We use the following technologies to collect technical information and general analytics:

• cookies – these are type of data files that are placed on your device and often include an anonymous unique identifier;
• log files, which track actions occurring on our Website (which we collect anonymous data on and track); and
• web beacons, tags, and pixels, which are electronic files used to record information about how you browse our Website.

By using our Website and our Services, you are consenting to the use of these technologies in accordance with this Privacy Policy.

‍

Can you choose not to disclose your personal information?

If you contact us to make a general enquiry about us or our business, you do not have to identify yourself or provide any personal information. You can also notify us that you wish to deal with us using a pseudonym.

Sometimes, if we are unable to collect personal information about you, we may not be able to provide you with the information or assistance you require. For example, we will not be able to send you information you have requested if you have not provided us with a valid email address or telephone number.

If you want, you can disable your web browser from accepting cookies and other technologies used to collect technical information and general analytics. If you do so, you can still access our Website, but it may impact your user experience.

How we use and disclose information

How do we use your personal information?

In general, we use your personal information for purposes or legitimate interests connected with our business.

We use your personal information strictly for the purposes of providing our Services to you. Specifically:

• to enable the proper operation and functionality of our Services as requested by you or your organization;
• to verify your identity when you access our Services;
• to communicate with you regarding our Services and to address any updates, issues or complaints;
• to consider you for a job at Edexia (whether as an employee or contractor) or other relationships with us;
• to meet our legal obligations related to providing our Services.
• to consider you for a job at Edexia (whether as an employee or contractor) or other relationships with us;
• to contact you regarding the above, including via electronic messaging such as SMS and email, by mail, by phone or in any other lawful manner.

We want to emphasise that we do not use your data for any purposes beyond what is necessary to provide you with our platform and services. We do not train any artificial intelligence models on your data, nor do we use it for any purposes not directly related to your use of our Services.

‍

In what circumstances do we disclose personal information?

We will only use personal information about you if we have a lawful basis to do so, for example:

• where you have given us your consent;
• where processing of your personal information is necessary for the performance of a contract with you;
• to meet our legal obligations; and
• to pursue our legitimate business interests.

However, we will only use or disclose your personal information:

• for the purposes for which we collected it (and related purposes which would be reasonably expected by you);
• for other purposes to which you have consented; and
• as otherwise authorised or required by law.

We may also use or disclose your personal information for our administrative, marketing (including direct marketing), planning, product or service development, quality control, survey and research purposes and for other purposes to which you have consented, or as otherwise permitted or required by law.

‍

Who do we disclose personal information to?

We may disclose your personal information to third parties in connection with the purposes described above (see the “How do we use your personal information?” section).

This may include disclosing your personal information to the following types of third parties:

• our related companies;
• our professional advisers (such as lawyers, accountants or auditors) and insurers;
• our employees, contractors and third party service providers who assist us in performing our functions and activities, specified in the Subprocessor list e.g. payment systems operators and financial institutions, cloud service providers, data storage providers, shipping companies, telecommunications providers and IT support services providers;
• third parties to whom you have authorised us to disclose your information (e.g. referees) as well as third parties who we engage to assist in providing the services; and
• any other person as required or permitted by law.

We may also share anonymous or de-identified usage data with our service providers for the purpose of helping us in such analysis and improvements. Additionally, we may share such anonymous or de-identified usage data on an aggregate basis in the normal course of operating our business; for example, we may share information publicly to show trends about the general use of our Services.

Anyone using our online communities, forums, blogs, or communication features on our Website may read any personal information or other information you choose to submit and post.

If we disclose your personal information to third parties we will use our utmost efforts to ensure that such third parties only use your personal information as reasonably required for the purpose of disclosure and in a manner consistent with applicable laws. This may include for example (to the extent commercially practical) by including suitable privacy and confidentiality clauses in our agreement with a third party service provider to which we disclose your personal information.

‍

What about direct marketing communications?

We will only send you direct marketing communications (either through mail, SMS or email), including offers, any news and exclusive offers, promotions, or events, where you have consented to do so in accordance with applicable privacy and direct marketing laws in your region.

You may opt-out of receiving direct marketing communications at any time by contacting us or by using opt-out facilities provided in the direct marketing communications.

‍

International transfer of personal information

We store personal information in servers located in Australia as well as through third party service providers located overseas. You can read more information in our subprocessor list for specific details, however any information stored overseas is anonymised. 

Where required under applicable privacy laws relevant to the transfer of personal information, we will take utmost effort steps to ensure that overseas recipients that we disclose personal information to have adequate safeguards in place. This may include assessing the privacy laws in the country where the information is disclosed or (to the extent reasonably practicable) putting in place contractual clauses with the third party service provider regarding data handling practices.

‍

How we manage information

How do we protect your personal information?

We have taken steps to secure and protect your personal information from misuse, loss, unauthorised access, modification or disclosure. We have implemented appropriate organisational and technical measures, which will be updated from time to time. Our Security Measures statement includes details such as our security framework, physical security, systems, data access and transmission and incident management.

While we have implemented appropriate organisational and technical measures, we cannot guarantee the security of transmission of personal information online. All personal information you share with us online is disclosed at your own risk.

Please notify us immediately if you become aware of any breach of security by contacting us as described in the “How to contact us” section below. You can also submit a complaint in line with the process outlined in the “How you can complain about a privacy issue” section below.

‍

How long do we keep your personal information?

We will keep your personal information only for as long as necessary to provide you with our Services, unless a longer retention period is required by law or specified in our retention policy. When you request deletion of your data, we ensure it is deleted completely from our systems, except where retention is necessary to comply with legal obligations, resolve disputes, or maintain security as specified in our retention policy.‍

‍

Your rights in relation to information

How can you seek to access and correct personal information we hold about you?

You may seek access, correct or update personal information we hold about you by contacting us as described in the “How to contact us” section below.

We will provide access to that information in accordance with applicable legal requirements’. We may require that the person requesting access provide suitable identification and where permitted by law we may charge a fee for giving access to your personal information.

You may have additional rights depending on applicable privacy laws, which may include:

• the right to request erasure of personal information we hold about you, for example if the personal information is no longer necessary to provide services to you;
• the right to withdraw consent. You may withdraw your consent at any time where we relied on your consent to process your personal information;
• the right to require us to stop using all or some of your personal information (for example, if we no longer have a legal right to keep using it) or to restrict our use of your personal information (for example, if you consider that the personal information we hold about you is inaccurate or if it is unlawfully held);
• the right to data portability. In some circumstances you have the right to be provided with a copy of the personal information we hold about you in a structured, machine-readable and commonly used format; and
• the right to require us to check with you before using or disclosing your personal information that it is accurate, up to date, complete and not misleading.

To avoid doubt, these additional rights will only apply to the extent required under the applicable privacy laws.

We may ask you to provide suitable identification when you seek to exercise any of these rights.

‍

Your rights relating to personal information

As the controller of the personal information you submit to our Services, you retain full ownership of your data. We process this information solely on your behalf and in accordance with your instructions as outlined in our agreement and this Privacy Policy.

‍

How can you complain about a privacy issue?

You may make a privacy complaint in relation to personal information we hold about you by contacting us as described in the “How to contact us” section below.

If you make a privacy complaint, our Privacy Officer or another suitable staff member will investigate the matter and attempt to resolve it as soon as reasonably possible (usually within 30 days of receipt of your complaint).

If you believe your concerns have not been resolved satisfactorily by us, or you wish to obtain more information on privacy requirements you can contact your regulatory authority. This may be:

• the Office of the Australian Information Commissioner on 1300 363 992 or visit their website at www.oaic.gov.au;
• your local data protection authority: https://edpb.europa.eu/about-edpb/board/members_en;
• the Office of the Privacy Commissioner (NZ): https://www.privacy.org.nz/; or
• the Office of the Privacy Commissioner (Canada): https://www.priv.gc.ca/en/.

‍

Local exemptions and inconsistency with law

Where local laws allow for an exemption to compliance with certain legal obligations (for example, the employee records exemption in Australia), we may rely on such an exemption.

This Privacy Policy will not apply to the extent that it is inconsistent with any applicable law.

‍

How to contact us

If you have a query, concern or complaint about the manner in which your personal information has been collected or handled by us or would like to request access to or correction of the personal information we hold about you, please contact using the details provided below:

Edexia Pty Ltd
Attention: Privacy Officer
7 Pampas Court, QLD 4157. Australia
admin@edexia.ai

‍

‍

‍