Privacy Policy

Overview

One Student and its related entities are committed to the protection of personal Information and Data as defined under the Privacy Act 1988 (Cth) and complying with the Australian Privacy Principles (APPs). The solution is known as ‘OneStudent’.

OneStudent will comply with our legal obligations and take all reasonable steps to protect the privacy of the personal Information and Data that OneStudent collect, manage, and hold in order for us to provide products and services.

By using One Student’s products or services, or providing personal Information and Data to OneStudent, you agree to the collection, use and disclosure of your personal Information and Data in accordance with the terms of this Privacy Policy.

The One Student Privacy Policy outlined below covers off the kinds of Information and Data collected by OneStudent (including personal Information and Data).

It outlines:

what we collect,
how we collected it,
what we do with it (including sharing),
how we secure it,
how we protect any personal Information and Data you provide, and
your choices regarding use, access, and changes to your personal data.

The protection of your personal Information and Data is imperative.

The OneStudent team:

is 100% committed to providing transparency and using digital technology responsibly, within the worlds dynamic digital landscape.
strives to develop new innovative solutions while holding themselves to the highest ethical standards.
manages and protects your Information and Data as a priority with absolute care.
strives to instil your trust by adhering to polices, standards and guidelines to ensure strict privacy practices are achieved, and
only use the Information and Data as outlined in this document.

This Privacy Policy applies to all businesses and companies (including groups) of OneStudent.

Information and Data collected through our service is solely for the purpose of providing services for which you (our Customer) have engaged OneStudent.

In the case a third-party provider is required to provide support to OneStudent on related services, OneStudent makes certain that access is limited to the personal Information and Data, and the OneStudent team only provides what is required for the third-party provider specific input. OneStudent ensures that those third-party providers comply with our Privacy Policy, that the companies meet our standards, guidelines, and legislative requirements.

The Purposes for Which OneStudent Collect, Hold, Use and Disclose Personal Information and Data

OneStudent collects personal Information and Data from you for purposes including:

to carry out our functions as a student academic data management organisation;
to enable us to provide our products and services to you;
to send you, Information and Data, offers and promotions about OneStudent related products and services that you have consented to receive;
to administer our database of personal Information and Data in order to develop new products and services; to improve the quality and quantity of Information and Data on our OneStudent sites; and
for statistical and marketing analysis and analytics.

When a school’s individual OneStudent solution is established, access is provided to a nominated Administrator account. The School’s OneStudent Administrator is responsible for the solution including:

management of access to ensure the Information and Data within this solution is protected from unauthorised users.
The on-going management and protection of the student Information and Data.

All Information and Data (including personal Information and Data) collected within the OneStudent solution is linked to a specific function and/or purposes, such as student information and data for recording academic marks, staff Information and Data for providing access to facility.

The OneStudent team has access to all school’s OneStudent including visibility of the Information and Data contained within the solution but will only access the individual school’s OneStudent instance upon request directly from our client, for the purposes of providing customer services such as support.

Outside of the OneStudent solution, OneStudent collects other Information and Data (including personal Information and Data) for the purpose of Customer Relationship Management (CRM), which is protected and managed within One Student’s Customer Relationship Management (CRM) system.

Kinds Of Information and Data that OneStudent Collect and Hold (Including Personal Information and Data)

The Information and Data OneStudent collect and hold within the OneStudent solution may include, but is not limited to:

Students:

Name,
Gender,
Date of birth,
Classes,
ID number (e.g., EQID Education, Queensland identification number), and
Learner Unique Identifier (LUI) number and/or Unique Student Identifier (USI) number, and
Individual student academic marking history.

Staff:

Name,
Staff ID number,
Staff Code,
Email,
Username,
Role,
Position, and
Faculty.

School:

Name, and
School code.

The Information and Data OneStudent collect and hold within the OneStudent Customer Relationship Management (CRM) system may include, but is not limited to:

Staff:

Name,
Staff ID number,
Staff Code,
Email,
Username,
Role,
Position, and
Faculty.

School:

Name, and
School code.

Where OneStudent is required to collect sensitive Information and Data, OneStudent will only do so with your consent and OneStudent will only use it for the purposes for which you provided it.

How The Information and Data Is Collected

Information and Data within the OneStudent solution is generally collected and imported by the schools OneStudent Administrator or Head of Departments. Information and Data related to student academic records are generated by other members of the school faculty.

Information and Data within the OneStudent Customer Relationship Management (CRM) is generally collected through our OneStudent websites online form, and/or collected based on an inquiry of OneStudent products or services.

Information and Data may also be provided to us by third parties such as service providers, advertisers, and publishers. Where OneStudent collects Information and Data from a third parties, OneStudent will comply with the relevant standards, guidelines, and legislations.

How The Information and Data Is Held

OneStudent is a paperless office, Information and Data is collected and managed throughout its life cycle in a digitised format.

Information and Data stored electronically within the OneStudent solution, is managed by either the school and/or by OneStudent. The OneStudent solution is hosted in the cloud by a third-party, Microsoft Azure, with the Information and Data residing in the country of origin. Azure is the first cloud platform to support both software and hardware-based Trusted Execution Environments (TEEs). TEEs ensure that encrypted data – whether it is stored, in transit or inactive is – safe from unauthorised access and tampering.

OneStudent will take all reasonable steps including technical controls and processes to ensure Information and Data (including personal information and data) is protected against interference, loss, unauthorised access, use, modification, copying, download or disclosure. Our team is bound to act in accordance with this Privacy Policy and applicable laws.

Where Information and Data held by OneStudent is no longer required to be held, OneStudent will de-identify or destroy such Information and Data (including personal information and data).

How OneStudent protects the Information and Data held

Any Information or Data provided over a public network regardless of security measures and safeguards in place, are never 100% protected from hackers and/or unauthorized third parties.

OneStudent has established best practice measures and control, based on the leading industry standards, regarding the protection of Information and Data.

At OneStudent we endeavour to keep your Information and Data (including personal Information and Data) safe and secure at all times, for as long as it’s required for business purposes. All Information and Data is managed via our head office located in Australia, we use industry leading technology and platforms to ensure the most comprehensive protection of our clients Information and Data. Passwords are required to access any technology used or developed by OneStudent, and passwords are kept confidential. Our OneStudent internal security framework is in place to safeguard our organisation and in turn, our clients Information and Data.

How OneStudent Use and Disclose personal Information and Data

By providing personal Information and Data to any team member of OneStudent, you agree to all other authorised OneStudent team members accessing and using that personal Information and Data in order for us to provide our products and services.

OneStudent may also disclose personal Information and Data to third parties, if appropriate, who provide services on our behalf or where required or authorised by relevant laws and policies to Australian federal, state government agencies and authorities.

Our third parties are required to protect your personal Information and Data in the same way that OneStudent must.

OneStudent have agreements in place with our third-party service providers, external agencies, and with our team who handle personal Information and Data provide to them by OneStudent.

Your personal Information and Data will not be otherwise disclosed without your consent unless required or authorised by law.

How You Can Access and Control Personal Information and Data

Any marketing communication received from OneStudent, will provide an ‘opt out’ option to choose, if you no longer want to receive these types of emails. The OneStudent solution communication emails are an exception to this rule, as they relate to system functionality such as password reset etc. While you’re an active user within the OneStudent solution, your Information and Data needs to be valid and active. The individual school OneStudent Administrator is responsible for the control of faculty users, including their personal Information and Data.

You have the right to access any of your personal Information and/or Data.

OneStudent will make personal Information and Data that we hold about you, available to you for inspection upon your request. There is no charge for you to access personal Information and Data that OneStudent may hold about you, but OneStudent may charge a fee to make a copy. You may contact the OneStudent team for information on how to access your personal Information and Data.

If you consider your personal Information and Data, that OneStudent holds about you to be incorrect, incomplete, out of date or misleading, you can request that the Information and Data be amended by contacting the OneStudent team. Where a record is found to be inaccurate, a correction will be made. Where you request that a record be amended but the record is accurate, the details of the request for amendment will be noted on the record. There is no fee associated with the correction of personal Information and Data held by us.