Introduction

Nova Tutoring Pty Ltd (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information in an open and transparent manner. This Privacy Policy outlines how we collect, use, hold, and disclose your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website (https://novatutoring.com.au), registering a student, or engaging our tutoring services, you agree to the collection and use of information in accordance with this policy.

1. Personal Information We Collect

The personal information we collect depends on the nature of your interaction with Nova Tutoring. This may include:

• Parent/Guardian Details: Full name, email address, mobile phone number, billing information, and residential suburb.
• Student Details: Full name, current school year level, current educational institution, and specific subject/stream enrollment details (including enrollment in standard academic tutoring or our specialized NovaMED medical entry programs).
• Payment & Transaction Data: Digital transaction reference data captured securely through our authorized payment processors. We do not store full credit card details or bank credentials on our local servers.
• Operational Notes: Specific learning requirements, baseline performance target goals, or third-party learning materials utilized by the student (e.g., MedEntry or Medify platforms).

2. How We Use Your Information

We collect personal information directly from you when you interact with our ecosystem, including when you:

• Submit a booking form or contact inquiry on our website.
• Complete an intake or registration form to secure an introductory lesson placement.
• Process a payment via our secure online checkout channels (including Apple Pay, Google Pay, or credit card processing).
• Communicate with us directly via email, phone, or corporate messaging platforms.

3. Why We Collect and Use Personal Information

We use your personal information strictly to fulfill our business services and maintain operational safety. Primary purposes include:

• Service Delivery: Assessing academic intake needs, matching students with an appropriately vetted, qualified tutor, and scheduling academic sessions.
• Billing & Financial Operations: Processing registration deposits, tracking package balances, issuing corporate tax invoices, and verifying bank remittances.
• Communication: Sending essential service updates, booking confirmations, or urgent scheduling amendments.
• Direct Marketing: Providing relevant updates regarding terminal course milestones, training workshops, or program announcements. You may opt out of receiving promotional marketing communications at any time by clicking the “Unsubscribe” button in our emails.

4. Disclosure of Personal Information to Third Parties

We do not sell, rent, or trade your personal data. We disclose personal information only to trusted third parties essential to delivering our business operations, including:

• Contracted Personnel: Providing assigned individual tutors with necessary academic metadata (student name, subject focus, and relevant operational learning notes) to deliver effective lessons.
• Payment Processors: Utilizing highly secure, cloud-hosted PCI-compliant payment infrastructure (such as Stripe) to process registrations and payment authorizations seamlessly.
• IT Ecosystem Providers: Cloud storage, database systems, and internal communication tools operating within our administrative architecture.

5. Data Security and Storage

We take reasonable technical and administrative steps to secure your data against misuse, loss, interference, and unauthorized access or modification:

• All digital records are housed inside a secure cloud ecosystem protected by Multi-Factor Authentication (MFA) and granular, role-based user access controls.
• Online checkouts utilize secure socket layer encryption protocols managed directly through external merchant providers.
• Personal data is retained only for as long as necessary to provide academic services or to satisfy mandatory legal financial audit and record-keeping requirements under Australian law.

6. Access, Correction, and the Right to Erasure

You have full legal rights regarding your personal information under the APPs:

• Access & Correction: You may request access to the personal records we hold about you, or request that inaccurate, outdated information be corrected at any time.
• Right to Erasure / De-identification: You may request that your personal information be permanently deleted from our records, subject to any outstanding commercial contracts or mandatory statutory record-retention requirements.

To submit a request regarding your data, please contact our team.

7. Links to Third-Party Websites

Our website may contain links to external sites that are not operated by us. We are not responsible for the content or privacy practices of these sites, and we recommend reviewing their privacy policies.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Any changes will be posted on this page, and the effective date will be updated accordingly. Your continued use of our website following any updates constitutes acceptance of those changes.