Privacy Policy
Last Updated: November 2025
1. INTRODUCTION
Welcome to Contour. We are dedicated to the privacy and security of the students, parents, and educators who form our community. This Privacy Policy consolidates the data governance practices for our three operating brands: Contour Education, Contour MedPrep, and Contour TestPrep (collectively, "Contour," "we," "us," or "our").
This Policy explains how we collect, hold, use, and disclose your Personal Information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and, where applicable, the Privacy and Data Protection Act 2014 (Vic). It describes the specific rights you have over your data and the obligations we accept in managing it.
By accessing our Stripe-integrated portals, enrolling in programs, or using our digital learning platforms, you consent to the data practices described in this Policy.
2. INFORMATION WE COLLECT
We collect information only where it is reasonably necessary for our educational and business functions. The types of information vary depending on whether you are a Student, a Parent/Guardian, or a casual site visitor.
2.1 Identity and Contact Data
- Personal Details: Name, date of birth, gender, and student identification numbers.
- Contact Information: Email address, mobile telephone number, and residential address.
- Parental Details: For students under the age of 18 (or as required by our terms), we collect the name and contact details of the parent or guardian responsible for the account.
- Campus Surveillance (CCTV): If you visit our physical campuses, your image and movements may be recorded by our CCTV systems for security purposes.
2.2 Academic and Educational Data
- Schooling Details: Year level, school attended, and subjects enrolled.
- Performance Metrics: Quiz/test scores, practice exam results, essay submissions, tutor feedback logs generated through our portals, study scores, and ATARs.
- Usage Telemetry: Data on how you interact with our learning modules, including time spent on questions and video watch rates. This data is used to personalise your learning experience and improve our educational algorithms.
2.3 Financial and Transaction Data
- Payment Information: We use Stripe to process all payments. We do not store full credit card numbers on our servers. We collect and store a payment token, the last four digits of your card, the card type, and the expiry date to facilitate easy checkout and recurring hassle-free billing.
- Transaction History: Records of products purchased, invoices, and billing addresses.
3. HOW WE COLLECT YOUR INFORMATION
We use a "fair and reasonable" approach to data collection, utilising the following methods:
- Direct Input: When you fill out an enrolment form, purchase a program via our Stripe portal, or submit an essay for marking.
- Automated Technologies: As you navigate our platforms, we use cookies, server logs, and similar technologies to collect Technical Data (IP address, browser type).
- Third Parties: We may receive information from schools (where you have authorised the release) or from our partners in the educational sector.
4. USE OF PERSONAL INFORMATION
We use your data for the following "primary purposes":
- Educational Delivery: To provide access to program materials, mark assessments, and provide personalised tutoring feedback.
- Payment Processing: To facilitate secure transactions via Stripe, manage subscriptions, and prevent fraud.
- Student Safety: To ensure a safe environment during in-person classes and online forums, including monitoring for cyber-bullying or "doxxing" in accordance with our Terms of Use.
- Service Improvement: To analyse aggregated, de-identified data to refine our curriculum and train our adaptive learning AI.
Secondary Purposes (Marketing):
By enrolling in a Contour program, you acknowledge and agree that:
- Updates: We may use your contact details to send you newsletters and updates about new programs.
- Publicity: We may use your first name, school, ATAR, study scores, and university offer outcomes in our marketing materials (including social media, brochures, and our website) to celebrate your success and promote our services.
- Images: You consent to us using photographs or video footage of you taken during classes or campus events for marketing purposes.
- Opt-Out: If you do not wish for your results or image to be used, you must notify us in writing at hello@contoureducation.com.au. Unless we receive such notice, your consent is implied by your continued enrolment.
- Unsubscribe: You may unsubscribe from marketing communications at any time via the link in our emails.
5. DISCLOSURE OF PERSONAL INFORMATION
We do not sell your personal information. We may disclose your information to the following categories of recipients:
- Service Providers: Third-party vendors who support our IT infrastructure, including cloud storage providers (e.g., AWS, Azure), email delivery systems, and customer support platforms.
- Stripe (Payment Processor): By using our payment services, you acknowledge that we share transaction data with Stripe. Stripe processes this data in accordance with its own Global Privacy Policy.
- Employees and Contractors: Our tutors, markers, and invigilators who require access to student work to perform their duties.
- Legal and Regulatory Bodies: We may disclose information if required by law, such as in response to a subpoena, or to report safety concerns to child protection authorities.
6. CROSS-BORDER DATA TRANSFERS
The digital nature of our business means your data may be processed overseas.
- Stripe Transactions: In compliance with the Stripe Services Agreement, we notify you that your Personal Data (including financial and identity data) may be transferred to, processed, and stored in the United States, Ireland, India, and other jurisdictions where Stripe operates. These jurisdictions may have data protection laws different from those in Australia.
- Cloud Infrastructure: Our educational platforms leverage global cloud networks. We take reasonable steps, including the use of Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs), to ensure that any overseas recipient handles your information in a manner consistent with the Australian Privacy Principles (APP 8).
7. CHILDREN’S PRIVACY AND THE "BEST INTERESTS" STANDARD
Contour is committed to the safety of children online and complies with the emerging standards of the Children’s Online Privacy Code.
- Parental Verification: For users under the age of 16, we require a parent or guardian to verify the account, typically through the payment method used at enrolment.
- No Behavioral Profiling: We do not build commercial behavioral profiles of users known to be minors for the purpose of third-party advertising. Our analytics are strictly limited to educational performance improvement.
- Data Minimisation: We only collect the data strictly necessary for the student’s learning journey.
8. STUDENT IMAGES AND INTELLECTUAL PROPERTY
We value student privacy and have updated our policy to reflect current fairness standards regarding image rights.
- Specific Consent: We will not use your photograph, video image, or testimonial in public marketing materials (e.g., website homepages, social media ads) without your specific, written consent.
- Revocable License: Unlike older policies that demanded a "perpetual" license, you have the right to revoke your consent for the use of your image at any time. Upon receipt of a revocation request, we will remove the image from our digital channels within a reasonable timeframe. (Note: We cannot recall physical materials already printed and distributed).
- Classroom Recordings: Sessions may be recorded for revision. These recordings are accessible only to the cohort enrolled in that class and are not used for public marketing.
9. DATA RETENTION AND SECURITY
We employ a "Tiered Retention Strategy" to balance privacy with financial compliance.
- Security: We use enterprise-grade encryption (SSL/TLS) for data in transit and at rest. Access to personal information is restricted to employees and contractors who need it to perform their job functions.
10. COOKIES AND TRACKING TECHNOLOGIES
We use cookies to ensure our portal functions correctly.
- Essential Cookies: Necessary for the operation of the Stripe payment gateway and student login sessions.
- Analytical Cookies: Help us understand site usage patterns.
- Pixel Policy: We may use tracking pixels (e.g., Meta Pixel) on our public marketing pages to measure ad conversion. You can opt-out of tracking cookies via your browser settings.
11. YOUR RIGHTS AND CONTACT
You have the right to request access to, correction of, or deletion of your personal information. We will respond to all requests within 30 days.
Contact the Privacy Officer at hello@contoureducation.com.au