Uplearn respects the privacy of schools, students and other website users. This policy explains what personal information we collect, why we collect it, how it is protected and how someone may access, correct or request deletion of their information.
Information We Collect:
For student accounts, the school provides Uplearn with the student’s name and school email address and authorises creation of the account. Students cannot independently register for access.
We may also collect:
- login and account access information;
- information provided through our contact form or support enquiries; and
- limited technical information, such as an IP address, browser type, operating system, login times and website security or error records.
We do not require students to provide their residential address, date of birth, financial details, government identifiers or identity documents to create an account.
If the required name and school email address are not provided, we cannot create the student’s account.
How We Collect Information
We collect personal information:
- from schools arranging access for their students;
- directly from people who contact us;
- when users access or use the website; and
- automatically through essential website functions and security records.
Uplearn does not currently use an external analytics or advertising service to track website use.
How We Use Information:
We use personal information to:
- create and manage accounts;
- provide access to Uplearn learning resources;
- communicate essential account, system or service information;
- respond to enquiries and provide support;
- maintain the security and operation of the website;
- identify and resolve technical problems; and
- meet our legal obligations.
We do not sell personal information or use student information for advertising.
Student Privacy:
Uplearn is designed primarily for secondary school students aged 14 years and over. Access is arranged and authorised by the student’s school.
Uplearn may communicate directly with students when necessary about their account or important system matters. Students are not required to add further personal information and cannot post content or communicate with other users through the service.
A parent or guardian may request access to, correction of or deletion of their child’s personal information. Uplearn will verify the person’s identity and authority before acting on the request and may consult the relevant school where appropriate.
How We Protect Information
Uplearn applies reasonable technical and organisational safeguards to protect personal information against loss, misuse, interference, unauthorised access, modification or disclosure.
Passwords are protected using one-way hashing and are not stored in readable form or accessible to Uplearn staff. We use HTTPS and other appropriate security measures to protect information transmitted between users and the website.
Access to personal information is limited to people who require it to operate, maintain or support the service.
Hosting Provider
Uplearn uses Conetix Pty Ltd to host the website and maintain website backups. Personal information stored through the website may therefore be processed and stored within Conetix’s Australian hosting environment.
Conetix may access information only when required to provide hosting, backup, security or technical support services.
Uplearn does not currently disclose personal information to overseas recipients. If this changes, we will update this policy and identify the relevant countries where practicable.
Disclosure of Information
Uplearn does not sell or provide personal information to third parties for their own marketing purposes.
We may disclose personal information:
- with the consent of the individual or, where appropriate, their school, parent or guardian;
- when necessary to provide or support the Uplearn service;
- when required or authorised by law or a court or tribunal order; or
- when reasonably necessary for an enforcement-related activity.
Retention and Deletion
We retain personal information only for as long as it is required to provide the service, maintain appropriate business and security records, or meet legal obligations.
When information is no longer required, we take reasonable steps to delete or de-identify it. Information contained in system backups may remain until those backups are replaced through the normal backup cycle.
Access, Correction and Deletion
Individuals may request access to, correction of or deletion of their personal information free of charge through our Contact Us page.
We may ask for information necessary to verify the person’s identity and authority before completing the request. We will respond as soon as reasonably practicable and ordinarily within 30 days.
Some information may need to be retained where required by law or for legitimate security, recordkeeping or contractual purposes. If we cannot complete a request, we will explain why.
Privacy Complaints
If you believe Uplearn has not handled personal information appropriately, you may submit a complaint through our Contact Us page.
We will acknowledge the complaint, investigate it and provide a response as soon as reasonably practicable. We aim to respond within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.
Data Breaches
Uplearn maintains processes for responding to suspected or confirmed data breaches. Where required, we will notify affected schools, individuals and the Office of the Australian Information Commissioner in accordance with applicable law.
Changes to this Policy
We may update this policy when our practices, services or legal obligations change. The current version will remain available on this website.
If a change materially affects how student information is handled, we will take reasonable steps to notify affected schools or users before the change takes effect.
Contact Us
Questions, requests or complaints concerning privacy may be submitted through our Contact Us page.
This version removes the accidental ST4S bullet, the old under-13 statement, unsupported analytics and marketing wording, and duplicated third-party provisions.