Privacy Policy: Educational Services, Schools and Student Users

Educational Services, Schools and Student Users

This section applies to users of the Mandy Money educational platform available through learn.mandymoney.com.au, including schools, educational institutions, teachers, school staff, students, parents and guardians.

Educational Purpose

Mandy Money provides educational resources, courses and learning programs designed to improve financial literacy and money management skills. Access to these programs may be provided directly to individuals or through participating schools and educational institutions.

Information Collected Through Educational Programs

When a school, teacher or student accesses learn.mandymoney.com.au, we may collect limited personal information that is reasonably necessary to provide educational services, including:

• Name and email address of teachers, school administrators and authorised school staff;
• Student first name, school-issued identifier, username, email address or other account information where required by the school;
• Course enrolment information;
• Learning progress, completion status and assessment results;
• Technical information relating to access, device type and platform performance.

We take reasonable steps to ensure that the personal information we collect is limited to what is necessary for the delivery of our educational services and complies with our obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Student Privacy and Children

We recognise that many users of our educational platform may be under 18 years of age.

Where Mandy Money provides services to a school or educational institution, the school is generally responsible for obtaining any parental or guardian consents required under applicable laws, regulations and school policies before providing student information to us or facilitating student access to our platform.

We handle personal information relating to children and students in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and any applicable State or Territory education privacy requirements.

We do not knowingly collect sensitive information (as defined in the Privacy Act 1988 (Cth)) from students unless it is reasonably necessary for the provision of educational services and authorised by the relevant school, parent or guardian, or otherwise permitted or required by law.

Educational Data Ownership

Where Mandy Money provides services to a school or educational institution, student learning records, progress data and educational information remain under the control of the relevant school, subject to applicable law and any agreement between Mandy Money and the school.

Mandy Money does not sell, rent or commercially exploit student personal information.

Student information is used solely for:

• Delivering educational content;
• Managing access to educational programs;
• Tracking learning progress and course completion;
• Supporting teachers and schools in administering programs;
• Improving educational effectiveness and platform performance;
• Meeting legal, regulatory and contractual obligations.

Learning Analytics

The platform may generate aggregated and de-identified learning analytics, usage statistics and reporting information to help Mandy Money improve educational outcomes, educational content and platform performance.

Where information has been de-identified, Mandy Money will take reasonable steps to ensure that individuals cannot be readily identified from that information.

These reports do not identify individual students and cannot reasonably be used to identify a particular student.

No Export of Identifiable Student Data

Mandy Money does not disclose identifiable student learning data for marketing, advertising or commercial profiling purposes.

Any reporting provided to schools is limited to authorised school personnel and relates only to students enrolled by that school.

Where personal information is disclosed to third-party service providers, such disclosure will only occur where reasonably necessary to provide educational services, comply with legal obligations, or as otherwise permitted under the Privacy Act 1988 (Cth).

Third-Party Educational Platform Provider

The educational platform available through learn.mandymoney.com.au is delivered using Coassemble, a third-party learning management system provider.

Coassemble acts as a service provider and processor on behalf of Mandy Money for the purpose of hosting, delivering and supporting educational content and learning activities.

Coassemble may process personal information solely for the purpose of providing platform functionality, technical support, security, storage and related educational services.

Mandy Money takes reasonable steps to ensure that third-party service providers handling personal information maintain appropriate privacy and security safeguards consistent with applicable Australian privacy laws.

Users may review Coassemble's privacy practices at:
https://coassemble.com/privacy-policy

Data Storage and Security

Educational data is hosted within Australia where reasonably practicable. Mandy Money and its service providers implement reasonable technical, organisational and administrative safeguards designed to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure, consistent with Australian Privacy Principle 11.

While no system can guarantee absolute security, Mandy Money and its service providers take reasonable steps to protect educational information and student records.

In the event of an eligible data breach, Mandy Money will comply with its obligations under the Notifiable Data Breaches scheme contained in Part IIIC of the Privacy Act 1988 (Cth).

Schools and Educational Institutions

Where Mandy Money enters into an agreement with a school or educational institution, the terms of that agreement may contain additional privacy, security and data handling obligations. In the event of any inconsistency between such an agreement and this Privacy Policy, the agreement will prevail to the extent of the inconsistency, unless otherwise required by law.

Requests Regarding Student Information

Parents, guardians and students seeking access to, correction of, or deletion of student information should generally contact their school in the first instance.

Mandy Money may work with the relevant school to respond to such requests in accordance with applicable privacy laws, including the Privacy Act 1988 (Cth), the Australian Privacy Principles, and any applicable State or Territory education privacy requirements.

Where Mandy Money is required by law to provide access to or correct personal information, we will do so in accordance with our legal obligations and any applicable contractual arrangements with the relevant school or educational institution.