Privacy Policy

Last Updated: 16 April 2024

Your privacy is important to us and so is being transparent about how we collect, use, and share information about you. This Privacy Policy explains our privacy practices for the activities described herein. Please read this Privacy Policy carefully to learn how we collect, use, disclose, store, and handle your personal information when you access our website (Website) or use any or our Services. Any reference to ‘Edexdia, ‘we’, ‘us’, ‘our’ or the ‘Company’ is a reference to Edexia Pty Ltd (ACN 676 224 892).

When you access our Website or use our Services you agree to the terms of this Privacy Policy.

Sometimes we will need to update our Privacy Policy so it may change from time to time. By continuing to use our Website or Services after we make any changes, you will be deemed to have accepted those changes, so it is important that you read this Privacy Policy in its entirety and check this Privacy Policy regularly for any updates.

What is personal information?

‘Personal information’ is information we collect and hold which is identifiable as being about you.

This policy covers how we treat your information, including your personal information, that you provide when you access or use our services. Our services include edexia, streamlining assessment marking and feedback for schools and teachers using artificial intelligence. We are not responsible for and our services don’t extend to the services of any company we don’t own or control, or people that we don’t manage.

Types of information we collect

So what types of personal information do we collect?

We collect personal information directly when you provide it to us. The types of personal information we collect includes but is not limited to:

· identifying information such as name & gender

· contact information such as mobile phone number and email address

· your qualifications & study history including grades attained, career preferences including sectors of interest, and the details of positions for which you have applied

· physical location

· IP addresses, and

· Nationality and work rights.

Any sensitive information you provide to us may be relevant to providing you with our services, and you acknowledge that we will use your sensitive information for this purpose. Your sensitive information will only be disclosed for another purpose where you would reasonably expect the sensitive information to be disclosed, and the disclosure is directly related to providing you with our services.

We may also collect personal information from you that you voluntarily disclose to us such as through surveys, responding to questionnaires or participating in other forms of research, which may include sensitive information.

Cloud-based Data Storage and Management of PDF Documents

We use cloud-based data storage solutions for managing PDF documents uploaded by users to our services.
These documents are stored on Google Cloud, which helps us organise data in a structured manner using parent folders.
File names are solely used for storage purposes and are not processed or utilised in any other way.
Access to these documents is restricted to ensure that users can only access their own uploaded data.
Users have the capability to delete their data.
Data fetching is conducted by the parent folder rather than by file name, which enhances data retrieval processes.
The AI systems involved in managing these documents do not have knowledge of the file names; they only process the contents within the files.

‍

Ways of collecting information

How do we collect information?

We have different ways of collecting information.

We collect your personal information directly from you, including when you:

access or use our Website;
subscribe to, purchase or use our Services;
use our Services as an authorised user (for example, as an employee of one of our customers who provided you with access to our services) where we act as a controller of your personal information;
sign up to receive marketing material including exclusive offers, promotions, or events;
participate in surveys, competitions, promotions or request information or material from us;
make inquiries about us or our Services or otherwise communicate with us by email, by telephone, in person, via the Website or otherwise; and
apply to work with us or are engaged by us.

We may collect personal information about you which may be provided to us by a teacher or staff member working at a particular school to which we provide our Services.

We may collect personal information about you from publicly available sources (such as the Internet) and from third parties (such as mutual contacts, or if someone makes a purchase on your behalf, or your referees provided during the recruitment process if you apply for a job with us). We may also collect personal information through third parties such as our service providers, and through promotional and marketing activities.

Our websites and services may contain links to other websites, applications, platforms and services maintained by third parties. The information practices of these third parties, including the social media platforms that host our branded social media pages, are governed by their privacy statements, which you should review to better understand their privacy practices.

How do you use cookies and analytics?

Certain information is collected automatically through your device, such as your computer address, computer type, operating system name and version, device manufacturer and model, language, Internet browser type and the websites you visit, including through cookies and analytics. We collect this information to analyse data, to track your experience on our Website and to improve the functionality and experience of Edexia products, services and our Website.

We use the following technologies to collect technical information and general analytics:

cookies – these are type of data files that are placed on your device and often include an anonymous unique identifier;
log files, which track actions occurring on our Website (which we collect anonymous data on and track); and
web beacons, tags, and pixels, which are electronic files used to record information about how you browse our Website.

By using our Website and our Services, you are consenting to the use of these technologies in accordance with this Privacy Policy.

Can you choose not to disclose your personal information?

If you contact us to make a general enquiry about us or our business, you do not have to identify yourself or provide any personal information. You can also notify us that you wish to deal with us using a pseudonym.

Sometimes, if we are unable to collect personal information about you, we may not be able to provide you with the information or assistance you require. For example, we will not be able to send you information you have requested if you have not provided us with a valid email address or telephone number.

If you want, you can disable your web browser from accepting cookies and other technologies used to collect technical information and general analytics. If you do so, you can still access our Website, but it may impact your user experience.

How we use and disclose information

How do we use your personal information?

In general, we use your personal information for purposes or legitimate interests connected with our business.

Some of the specific purposes for which we use your personal information are as follows:

to provide our Services to our customers or to receive goods or services from our suppliers;
to enable the proper operation and functionality of our Services;
to verify your identity (for example, if you request access to the personal information we hold about you);
to consider you for a job at Edexia (whether as an employee or contractor) or other relationships with us;
to communicate with you and to address any issues or complaints that we or you may have regarding our relationship;
for direct marketing purposes (see the “Direct marketing” section below); and
to contact you regarding the above, including via electronic messaging such as SMS and email, by mail, by phone or in any other lawful manner.

In what circumstances do we disclose personal information?

We will only use personal information about you if we have a lawful basis to do so, for example:

where you have given us your consent;
where processing of your personal information is necessary for the performance of a contract with you;
to meet our legal obligations; and
to pursue our legitimate business interests.

However, we will only use or disclose your personal information:

for the purposes for which we collected it (and related purposes which would be reasonably expected by you);
for other purposes to which you have consented; and
as otherwise authorised or required by law.

We may also use or disclose your personal information for our administrative, marketing (including direct marketing), planning, product or service development, quality control, survey and research purposes and for other purposes to which you have consented, or as otherwise permitted or required by law.

Who do we disclose personal information to?

We may disclose your personal information to third parties in connection with the purposes described above (see the “How do we use your personal information?” section).

This may include disclosing your personal information to the following types of third parties:

our related companies;
any potential third party acquirer of our business or assets, and advisors to that third party;
our professional advisers (such as lawyers, accountants or auditors) and insurers;
our employees, contractors and third party service providers who assist us in performing our functions and activities e.g. payment systems operators and financial institutions, cloud service providers, data storage providers, shipping companies, telecommunications providers and IT support services providers;
customers with whom you are affiliated, whom if you use our services as an authorised user, we may share your personal information with your affiliated customer responsible for your access to the services to the extent this is necessary for verifying accounts and activity, investigating suspicious activity, or enforcing our terms and policies;
organisations authorised by us to conduct promotional, research or marketing activities;
third parties to whom you have authorised us to disclose your information (e.g. referees) as well as third parties who we engage to assist in providing the services; and
any other person as required or permitted by law.

We may also share anonymous or de-identified usage data with our service providers for the purpose of helping us in such analysis and improvements. Additionally, we may share such anonymous or de-identified usage data on an aggregate basis in the normal course of operating our business; for example, we may share information publicly to show trends about the general use of our Services.

Anyone using our online communities, forums, blogs, or communication features on our Website may read any personal information or other information you choose to submit and post.

If we disclose your personal information to third parties we will use reasonable commercial efforts to ensure that such third parties only use your personal information as reasonably required for the purpose of disclosure and in a manner consistent with applicable laws. This may include for example (to the extent commercially practical) by including suitable privacy and confidentiality clauses in our agreement with a third party service provider to which we disclose your personal information.

What about direct marketing communications?

We will only send you direct marketing communications (either through mail, SMS or email), including offers, any news and exclusive offers, promotions, or events, where you have consented to do so in accordance with applicable privacy and direct marketing laws in your region.

You may opt-out of receiving direct marketing communications at any time by contacting us or by using opt-out facilities provided in the direct marketing communications.

International transfer of personal information

We store personal information in servers located in Australia as well as through third party service providers located overseas. We may disclose your personal information to overseas recipients, such as to our subsidiaries, subscribers, resellers and service providers located overseas, in order to provide our Services and/or to obtain services.

Where required under applicable privacy laws relevant to the transfer of personal information, we will take commercially reasonable steps to ensure that overseas recipients that we disclose personal information to have adequate safeguards in place. This may include assessing the privacy laws in the country where the information is disclosed or (to the extent reasonably practicable) putting in place contractual clauses with the third party service provider regarding data handling practices.

How we manage information

How do we protect your personal information?

We have taken steps to secure and protect your personal information from misuse, loss, unauthorised access, modification or disclosure. We have implemented appropriate organisational and technical measures, which will be updated from time to time. Our Security Measures statement includes details such as our security framework, physical security, systems, data access and transmission and incident management.

While we have implemented appropriate organisational and technical measures, we cannot guarantee the security of transmission of personal information online. All personal information you share with us online is disclosed at your own risk.

Please notify us immediately if you become aware of any breach of security by contacting us as described in the “How to contact us” section below. You can also submit a complaint in line with the process outlined in the “How you can complain about a privacy issue” section below.

How long do we keep your personal information?

We will keep your personal information for no longer than is necessary for the purposes for which your personal information was collected unless a longer retention period is required by law, under a licence or if it is reasonably necessary for us to comply with our legal obligations, resolve a dispute or maintain security.

Your rights in relation to information

How can you seek to access and correct personal information we hold about you?

You may seek access, correct or update personal information we hold about you by contacting us as described in the “How to contact us” section below.

We will provide access to that information in accordance with applicable legal requirements’. We may require that the person requesting access provide suitable identification and where permitted by law we may charge a fee for giving access to your personal information.

You may have additional rights depending on applicable privacy laws, which may include:

the right to request erasure of personal information we hold about you, for example if the personal information is no longer necessary to provide services to you;
the right to withdraw consent. You may withdraw your consent at any time where we relied on your consent to process your personal information;
the right to require us to stop using all or some of your personal information (for example, if we no longer have a legal right to keep using it) or to restrict our use of your personal information (for example, if you consider that the personal information we hold about you is inaccurate or if it is unlawfully held);
the right to data portability. In some circumstances you have the right to be provided with a copy of the personal information we hold about you in a structured, machine-readable and commonly used format; and
the right to require us to check with you before using or disclosing your personal information that it is accurate, up to date, complete and not misleading.

To avoid doubt, these additional rights will only apply to the extent required under the applicable privacy laws.

We may ask you to provide suitable identification when you seek to exercise any of these rights.

Your rights relating to personal information

We may also process personal information submitted by or for a customer to our Services. To this end, if not stated otherwise in this Privacy Policy or in a separate disclosure, we process such personal information as a processor on behalf of our customer (and its affiliates) who is the controller of the personal information.

We are not responsible for and have no control over the privacy and data security practices of our customers, which may differ from those explained in this Privacy Policy. If your personal information has been submitted to us by or on behalf of a Edexia customer and you wish to exercise any rights you may have under applicable privacy laws, please inquire with them directly.

We may only access a customer’s data upon their instructions. If you wish to make your request directly to us, please provide us the name of the Edexia customer who submitted your personal information to us. We will refer your request to that customer, and will support them as needed in responding to your request within a reasonable timeframe.

How can you complain about a privacy issue?

You may make a privacy complaint in relation to personal information we hold about you by contacting us as described in the “How to contact us” section below.

If you make a privacy complaint, our Privacy Officer or another suitable staff member will investigate the matter and attempt to resolve it as soon as reasonably possible (usually within 30 days of receipt of your complaint).

If you believe your concerns have not been resolved satisfactorily by us, or you wish to obtain more information on privacy requirements you can contact your regulatory authority. This may be:

the Office of the Australian Information Commissioner on 1300 363 992 or visit their website at www.oaic.gov.au;
your local data protection authority: https://edpb.europa.eu/about-edpb/board/members_en;
the Office of the Privacy Commissioner (NZ): https://www.privacy.org.nz/; or
the Office of the Privacy Commissioner (Canada): https://www.priv.gc.ca/en/.

Local exemptions and inconsistency with law

Where local laws allow for an exemption to compliance with certain legal obligations (for example, the employee records exemption in Australia), we may rely on such an exemption.

This Privacy Policy will not apply to the extent that it is inconsistent with any applicable law.

How to contact us

If you have a query, concern or complaint about the manner in which your personal information has been collected or handled by us or would like to request access to or correction of the personal information we hold about you, please contact using the details provided below:

Edexia Pty Ltd
Attention: Privacy Officer
7 Pampas Court, QLD 4157. Australia
admin@edexia.ai

‍