Privacy Policy | AfterClass

Last updated: [date]

AfterClass ([legal entity name], ABN [ABN]) ("we", "us") provides online test preparation for the NSW Opportunity Class (OC) and Selective High School placement tests. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Information we collect

Parent or guardian account: name, email address and password (stored securely, never in plain text).
Child profile: [first name or nickname, year level, target exam] and the child's activity on the platform, such as answers, scores, writing submitted for marking and progress.
Payments: handled by [payment provider]. We do not store full card numbers.
Support messages you send us.
Technical and usage information: device and browser details, pages visited, and cookies (see below).

Children's information

Children use AfterClass through a parent or guardian's account. We collect only what is needed to personalise their practice and show their progress, we do not use it to advertise to children, and we do not sell it. A parent or guardian can ask us to access, correct or delete their child's information at any time.

How we use information

To provide, personalise and improve the service, including daily missions, homework and progress reports.
To manage accounts, subscriptions and support.
To send service emails and, where permitted, updates about AfterClass (you can unsubscribe).
To understand how people find and use the site, and to measure our advertising.
To keep the service secure and meet legal obligations.

Cookies, analytics and advertising

We use the following tools on our website and app:

Google Analytics 4: measures visits and sign-ups.
Meta Pixel: measures the results of our Facebook and Instagram advertising.
Session and heatmap tools: record anonymised sessions and heatmaps to help us improve pages. Text fields and personal details are masked.
Campaign cookie: remembers which campaign or referral brought a visitor to us (for example the advertising campaign name, and the click identifiers Google and Meta add to ad links, such as gclid, gbraid, wbraid and fbclid), the website they came from and when they first arrived. It lasts 90 days.
App campaign cookie: when you arrive at our app from a campaign link, the app keeps the same details in a secure cookie for 30 days. If you create an account, we save where you came from (campaign, source, medium and the advertising click identifier) with your account so we can understand which marketing works.
Sharing with Google and Meta: when you click one of our ads, Google or Meta adds a click identifier to the link. When you sign up or subscribe, we may send that click identifier, together with the Google Analytics identifier from your browser and the type and time of the event (for example "sign-up"), to Google or Meta so they can match the result to the ad. We do not send your name, your child's details or your payment information, and we do not use this to advertise to children. Google and Meta handle this information under their own privacy policies.

You can block or delete cookies in your browser settings, or opt out of Google Analytics and Meta advertising through their own settings. Some features may not work without cookies.

Who we share information with

We share information only with service providers who help us run AfterClass, such as hosting ([hosting provider and region]), payments ([payment provider]), email ([email provider]), and the analytics and advertising tools above. We do not sell personal information. We may disclose information where the law requires it.

Overseas disclosure

Some providers, including Google, Meta and our other analytics providers, may store or process information outside Australia, including in [countries]. We take reasonable steps to make sure they handle it in line with the Australian Privacy Principles.

Keeping information safe, and for how long

We use measures such as encryption in transit and access controls to protect information. We keep information while an account is active and for [retention period] afterwards, unless the law requires us to keep it longer, then delete or de-identify it. Advertising click identifiers (such as Google and Meta click IDs) are deleted [90] days after sign-up.

Access, correction and complaints

You can ask to see or correct the information we hold, or ask us to delete it, by emailing [privacy email]. If you have a complaint, contact us first and we will respond within [30] days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.

Contact

[legal entity name], [address]. Email: [privacy email].