Privacy policy

What we collect

We collect only what we need to teach your learner and to run the enrolment. In practice that is:

• Contact details for the parent or carer, and the learner's first name and year level
• Diagnostic results and the Understanding Ledger record: descriptors, dates, teach-back outcomes and delayed-check scores
• Session attendance and, where consented, session recordings for one-to-one and Duo sessions
• Billing information, held by our payment provider rather than by us
• Any learning-difficulty or adjustment information you choose to tell us

We do not collect your learner's assessment tasks. The Ledger has no field for one, and uploading an assessment brief is blocked by design as well as by policy.

How we use it

To deliver teaching, to produce your four-weekly report, to schedule and bill, and to improve our own teaching quality. Ledger data is not used for marketing without your separate, specific, opt-in consent, and it is never shared across other CAQA Groups entities without it.

Session recordings

One-to-one and Duo sessions may be recorded with consent. Group sessions are never recorded for release, because they contain other people's children. Recordings are encrypted, watermarked to the account, retained for 90 days and then deleted. There is no download.

Where it is stored

In Australian data-centre regions. Access is least-privilege and multi-factor. Any overseas processor is disclosed. Any AI service we use is contractually prohibited from training on learner data, and that term is recorded in our vendor register.

Your rights

You may see, correct or ask us to delete your information at any time, free, by emailing info@caqa.com.au. Parents have full access to their own child's Ledger on request. From age 15, learners may request access in their own right, and may ask that specified information is not disclosed to a parent. We will confirm the exact threshold and process with our adviser before launch.

If something goes wrong

We follow the Notifiable Data Breaches scheme. Eligible breaches are notified to the OAIC and to affected individuals. See the data breach response policy.

Complaints

Contact us first at info@caqa.com.au. If you are not satisfied you may complain to the Office of the Australian Information Commissioner.