Privacy Policy

Last Updated: 19 September 2025

This Privacy Policy applies to all personal information collected by Boost Tutoring Australia Pty Ltd (Boost, we, us or our) via the website located at www.boosttutoring.com.au (Website).

1. About

Boost has implemented this Privacy Policy to explain how we collect, use, disclose and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you have questions about this Policy, contact us using the details in clause 16.
We may, from time to time, review and update this Privacy Policy, including to consider new laws, regulations, practices and technology. All Personal Information held by us will be governed by our most recent Privacy Policy. Significant changes will be notified on our website with a new ‘Last Updated’ date, and where appropriate we will provide direct notice.

2. What information does Boost collect?

The kind of Personal Information that we collect from you will depend on how you use the website. Depending on your relationship with us (student, parent/guardian, website user, job applicant, contractor or tutor), the Personal Information which we collect and hold about you may include:
- Identity and contact data: name, date of birth, address, email, phone;
- Student data: school year level, school affiliation, learning goals and any support needs you choose to share;
- Parent/guardian data: identity and contact details, relationship to the student;
- Employment data (applicants/contractors/tutors): CV, accreditation and qualifications, ABN, right-to-work verification, Working With Children Check (WWCC) status and other screening outcomes;
- Transaction data: program selections, invoices, payment method tokens and payment history;
- Media and recordings: photographs, video or audio captured at sessions or events, session recordings where enabled, and CCTV footage at our facilities; and
- Technical data: device identifiers, IP address, usage logs and cookie data.
We use PCI-DSS compliant payment processors. We do not store full credit card numbers on our systems. Where direct debit details are collected, they are handled by our payments provider and subject to its security controls

3. Types of Information

The Privacy Act 1998 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.

Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:

whether the information or opinion is true or not; and
whether the information or opinion is recorded in a material form or not.

If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as “Personal Information” and will not be subject to this privacy policy.

Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual’s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.

Sensitive Information will be used by us only:

for the primary purpose for which it was obtained;
for a secondary purpose that is directly related to the primary purpose; and
with your consent or where required or authorised by law

4. How we collect your Personal Information

We collect personal information directly from you (online forms, membership agreements, direct debit authorisations, phone and in-centre interactions) and from third parties where permitted, including:
- Parents/guardians;
- Schools or education partners with consent;
- Referees, background-check and screening providers; and
- Our payment and technology providers.

If we receive information about you from a third party, we will take reasonable steps to notify you.

We generally do not collect sensitive information. If you choose to provide health, disability or other sensitive information to support a student’s learning, we will collect and use it with your consent for that purpose or where otherwise permitted by law.
We collect personal information about children only with the consent of a parent or legal guardian, unless an exception applies. Parents/guardians may access and manage a child’s information in accordance with clause 12.
Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third party, in cases like this we will take steps to make you aware of the information that was provided by a third party.
If the Personal Information we collect includes Sensitive Information, we will ask for your consent to collect sensitive information, unless the law allows us to collect it without your consent.
Where we engage with you multiple times over a short period, we may not provide you with a separate notice about privacy each time we engage with you.
In most cases, if you choose not to provide your Personal Information to us for the purposes set out in this Privacy Policy, or if we do not or are unable to collect the Personal Information we require, we may not be able to provide you with requested information, products or services, or to effectively conduct our relationship with you.

5. Purpose of Collection

We collect, use and disclose personal information to:
- deliver tutoring programs and student support;
- operate and improve our online platform and in-centre services;
- provide you with the best service experience possible on the Website;
- communicate about enrolments, schedules, progress and service updates;
- process payments and manage accounts;
- ensure safety and compliance, including WWCC and other legal requirements;
- conduct analytics, quality assurance and service improvement (see clauses 7–9); and
- comply with laws, respond to lawful requests and protect our legal rights.

We may de-identify information for reporting, research and statistical purposes.

We reserve the right at all times to monitor, review, retain, and/or disclose any information as necessary to satisfy any applicable law, but we have no obligation to monitor the use of the Website or to retain the content of any user or learning session.

6. Direct Marketing

By using our Website, you consent to the receipt of direct marketing material. We will only use your Personal Information for this purpose if we have collected such information direct from you, and if it is material of a type which you would reasonably expect to receive from use. We do not use sensitive Personal Information in direct marketing activity and do not send marketing communications to children. Our direct marketing material will include a simple means by which you can request not receive further communications of this nature, such as an unsubscribe button link. We will promptly action any opt-out requests from marketing communications.

7. Cookies

We may also collect cookies from your computer which enable us to tell when you use the Website and also to help customise your Website experience. As a general rule, however, it is not possible to identify you personally from our use of cookies.
Cookies may also be used for other purposes on our Website. You can manage cookies in your browser settings; blocking some cookies may impact functionality

8. Analytics

We may aggregate personal information for reporting, statistical and analysis purposes, and for business, product and service improvement purposes. This allows us to better inform ourselves and anticipate our customers’ preferences and requirements, and to monitor and improve the effectiveness of our business, products and services.
We use Google Analytics to generate aggregated reports about site usage. Google may process the data it collects per its privacy policy. Where feasible, we enable IP anonymisation and other controls to reduce the identifiability of visitors. The information generated is used to create reports about the use of our Website. Google will store this information.
If you do not want your Website visit data reported by Google Analytics, you can opt-out and install the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout.
We may create de-identified datasets for analytics and product improvement. We will not attempt to re-identify de-identified information.

9. Screen Recordings

We operate CCTV at certain locations for safety and security in accordance with applicable privacy and surveillance laws. We may also capture photographs or video at programs and events where you have provided media consent. See our Membership Agreement for media consent options and clause 12 of this Policy for security and retention.
We may use various technological methods from time to time to track the visiting patterns of individuals accessing our Website.
Where session recordings operate, we use them for safety, quality assurance, training and operational management. Recordings are retained for limited periods unless needed for an investigation or legal reason.
We may use session replay tools to capture user interactions on our Website or applications (e.g., mouse movements, clicks, scrolling) to troubleshoot issues and improve usability. We use this information to debug errors, optimise pages, enhance the user experience and support customers. We configure these tools to mask or exclude payment and other sensitive fields and retain recordings only for short periods unless needed for support or security investigations.

10. Social Media Integrations

Third-party social media widgets on our site may collect information about your visits, even if you do not interact with them. Your use of those platforms is subject to their privacy practices. We are not responsible for the technical operation of these applications or the collection and use practices of the relevant third parties.

11. Software Hosting and Developers

We may also disclose your Personal Information to our Website host or software application providers and developers in certain limited circumstances.
Your Personal Information may also be exposed from time to time to maintenance and support personnel acting in the normal course of their duties

12. Security, Access and Correction

We aim to keep your Personal Information secure. We implement technical and organisational measures appropriate to the risk, including access controls, encryption in transit, logging and staff training
We retain personal information only as long as needed for the purposes described or to meet legal obligations. Typical retention periods include: student and account records up to seven (7) years after last interaction to fulfill our record keeping obligations; CCTV and session recordings for short operational periods unless required for safety or legal purposes. When we no longer require your Personal Information for the purpose for which we obtained it, we will take reasonable steps to securely destroy and anonymise or de-identify it.
The Australian Privacy Principles:
- Permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12); and
- Allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).
You may request access to or correction of your personal information by contacting us (clause 16). We will verify your identity, respond within a reasonable period (ordinarily within 30 days) and provide written reasons if we refuse any part of a request, together with how to complain.
If we experience a data breach that is likely to result in serious harm, we will conduct an assessment and, where required by law, notify affected individuals and the Office of the Australian Information Commissioner.

13. Complaints Procedure

If you have a privacy complaint concerning the way we maintain the privacy of your Personal Information, please contact us as set out in clause 16.
All complaints will be considered by EdenYork Legal Pty Ltd and we may seek further information from you to clarify your concerns. EdenYork Legal will acknowledge receipt and aim to respond within 30 days. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (www.oaic.gov.au) for guidance or to make a complaint

14. Overseas Transfer

Your Personal Information will not be disclosed to recipients outside Australia unless you expressly request us to do so. If you request us to transfer your Personal Information to an overseas recipient, the overseas recipient will not be required to comply with the Australian Privacy Principles, and we will not be liable for any mishandling of your information in such circumstances.
Some service providers and systems may be located outside Australia or store data in multiple regions.

15. Call Recording for Quality and Assurance

15.1 To ensure quality and training, we may record calls and customer communications. By using our services, you consent to call recording unless you request otherwise.

16. GDPR

In some circumstances, the European Union General Data Protection Regulation (GDPR) provides additional protection to individuals located in Europe. The fact that you may be located in Europe does not, however, on its own entitle you to protection under the GDPR. Our Website and services do not specifically target customers located in the European Union and we do not monitor the behaviour of individuals in the European Union, and accordingly the GDPR does not apply. Our services are directed to Australia.

17. Contact Us

If you have any requests, queries, or if you seek access to your Personal Information, or if you have a privacy complaint about our privacy practices, you can contact our legal team through: enquiries@edenyork.com.au.