Privacy Policy

Effective date: 20 December 2025
Entity: Hall Education Pty Ltd (ACN 690 854 623, ABN 32 690 854 623), trading as Concept Education ("Concept Education", "we", "us").

 

This Privacy Policy explains how we collect, use, disclose and protect personal information when we provide online tutoring, group classes and memberships (e.g., Study Club) to school students. It also explains how you can access and correct your information and make a privacy complaint. Nothing in this Policy limits your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

 

1. What we collect. 

We collect the minimum information needed to deliver our services. The types of personal information we commonly collect are listed below.

 

 

Parents/guardians and account holders:

• Identification and contact details (name, email, phone, address)
• Relationship to the Student
• Billing details and transaction records (we do not store full credit‑card numbers; payments are processed by our payment provider)

   

• Communications with us (emails, chat messages, notes from phone calls,  feedback/reviews).

 

 

 

Students: 

• Identification (name, preferred name), school year, subjects, assessment dates and learning challenges and goals
• Session data (bookings, attendance, notes, homework/task progress)
• Session recordings (audio/video)
• Learning support needs you choose to share (e.g., accommodations, disability or health information) — treated as sensitive information. 

 

 

 

Website and platform:

• Technical data such as device type, browser, IP address, time zone, and cookie/pixel data for security, performance and analytics. 

 

2. How we collect information - directly from you when you create an account, make a booking, complete forms, or communicate with us from the Student (with parental involvement for under‑18s) automatically through our website/app (cookies, logs and similar technologies) from third parties with your consent (e.g., a teacher sharing curriculum objectives) or as permitted by law from recordings of Sessions. 

 

3. Why we collect and how we use information - to provide, schedule and deliver one‑to‑one and group tutoring Sessions and memberships match Students with Tutors and manage changes of Tutor personalise learning plans, track progress and provide feedback operate our platform, provide customer support and maintain quality (including review of a sample of lessons and, where enabled, Session recording for quality assurance and the Student’s revision) process payments, invoicing and manage accounts send operational messages (confirmations, reminders, policy updates) and, if you consent or as permitted by law, direct marketing about relevant services (which you can opt‑out of at any time) comply with laws (including safeguarding, taxation and privacy), detect fraud and ensure platform security.

 

4. How we use personal information: We only collect sensitive information (e.g., health or disability details) with consent or where permitted/required by law. You can choose what you disclose; if you prefer not to share health information, we will still aim to provide a quality service.

 

5. Who we share information with:

• Tutors delivering Sessions for us (limited to information necessary to teach the Student).
• Service providers who support our operations (e.g., video‑conferencing, scheduling, email/SMS, analytics, cloud hosting, payments). We require these providers to safeguard personal information and use it only to provide services to us.
• Payment provider to process transactions. We do not store full credit card numbers.
• Schools/teachers, only with consent from and by request of the parent/guardian.
• Regulators and law enforcement if required or authorised by law (e.g., responding to a lawful request).
• Professional advisers (lawyers, accountants, auditors) under confidentiality obligations.
• Business transfers. If we restructure or sell part of our business, personal information may be transferred in a manner that is confidential and subject to this Policy.
• We share personal information only as needed for our functions. 

6. Overseas disclosure (cross‑border). Some service providers (such as for video conferencing or web hosting services) or their servers may be located outside Australia (for example, in the United States, the European Union, Singapore or other jurisdictions). 

7. Direct marketing and communications. We may send parents/guardians and adult Students information about new classes, events or offers. You can opt out at any time by using the unsubscribe link or contacting us. We do not sell personal information to third parties for their marketing.

8. Operational communications (e.g., Session reminders, invoices) are part of the service and will continue while your account is active.

9. Access and correction.  You can access or request correction of your personal information by emailing [email protected]. We may ask you to verify your identity. We aim to respond within a reasonable time (usually 30 days). For Students under 18, a parent/guardian generally makes requests on the Student’s behalf. 

 

10. Session recordings. By default, one-to-one tutoring Sessions are recorded. Recordings are stored securely for up to three (3) months, then deleted unless we are required by law to retain them longer. 

Access to recordings is limited to the Student, parents/guardians, the Tutor and authorised staff for quality purposes. 

Group sessions are recorded only for quality assurance purposes. Recordings of group sessions cannot be provided to customers. 

 

11. Security and retention. We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. Measures include access controls, encryption in transit where supported, secure credential practices, staff training and vendor due diligence. We retain personal information only for as long as needed for our functions or as required by law, then take reasonable steps to de‑identify or securely destroy it. Transaction records may be kept for statutory periods.

 

12. Payments. We use a third‑party payment provider to process card payments. We do not store full card numbers on our systems.

 

13. Cookies and analytics. We use essential cookies to make our website work and may use analytics cookies/pixels to understand performance and improve our services. You can control cookies through your browser settings. If you block cookies, parts of our site may not function correctly. We do not combine analytics data with identifiable profiles unless you are logged in and using our platform.

 

14. Children and young people.  For Students under 18, a parent/guardian manages the account and provides consents. We consider an underage Student’s maturity on a case‑by‑case basis when handling access or correction requests and may refer the matter to the parent or guardian. 

 

15. Data breaches. If we experience a data breach involving personal information, we will promptly investigate. Where a breach is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches (NDB) scheme. We will also advise you on steps you can take to protect yourself and on what we are doing to reduce risk.

 

16. Complaints. If you are concerned about how we have handled your personal information, contact coordinator (@) concepteducation.com.au. Please include your name, contact details and a description of your concern. We aim to respond within 10 business days.

If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC): oaic.gov.au | 1300 363 992 | GPO Box 5218, Sydney NSW 2001.

 

17. Changes to this Policy. We may update this Policy from time to time. The updated version will be posted on our website with a new effective date. Material changes will be notified to account holders by email.

 

18. Contact us. Email: coordinator (@) concepteducation.com.au