HSCAssociate Privacy Policy

Last updated: 23 September 2026

1. About this Privacy Policy

HSCAssociate Pty Ltd (“HSCAssociate”, “we”, “us” or “our”) provides educational technology, study resources, online classes, tutoring-related services and other educational services for secondary school students.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you use our websites, applications, educational platform, resources, classes, tutoring services or otherwise interact with us.

We aim to collect only information that is reasonably necessary for our activities and to handle that information responsibly.

2. Personal Information We Collect

The information we collect depends on how you use HSCAssociate.

We may collect:

Account and contact information

name
email address
phone number
account identifiers
login and authentication information
whether an account is used by a student, parent or other authorised user

Student and educational information

school year or year level
subjects studied
learning goals and areas for improvement
academic performance information voluntarily provided to us
responses to practice questions, quizzes and assessments
essays, short answers and other work submitted through the Platform
marking results, feedback, scores and progress information
study activity and use of educational features
tutoring or class preferences and requirements

Parent and tutoring information

Where tutoring, classes or other managed educational services are used, we may collect:

parent or guardian contact details
student contact details
subject and tutoring requirements
scheduling and availability information
communications relating to tutoring or classes
attendance and lesson-related information
information necessary to administer the educational service

Class and session information

Where applicable, we may collect information relating to:

class enrolment
attendance
participation
submitted work
communications with instructors
session or class recordings where recording is used and participants have been appropriately informed

Payment and transaction information

If you purchase a subscription, HSC Pass, class, resource, tutoring service or another paid product, we may collect information relating to the transaction, including:

customer name and contact details
product or service purchased
amount paid
payment status
transaction identifiers
billing information
refund or dispute information

Payment card information is generally processed by our payment service providers rather than stored directly by HSCAssociate.

Communications

We may collect information you provide when you:

contact us
submit an enquiry
request support
respond to an email
request a resource
participate in tutoring or classes
provide feedback
make a complaint or refund request

Technical and usage information

When you use our websites or Platform, we may automatically collect information such as:

IP address
browser and device information
pages or features accessed
dates and times of access
interactions with the Platform
referring pages
diagnostic, performance and error information
cookies and similar technologies

3. How We Collect Personal Information

We may collect personal information:

directly from you
from a parent or guardian acting for a student
through account registration
through our websites and Platform
through resource or enquiry forms
when work is submitted for marking or feedback
when you enrol in or participate in classes or tutoring
when you communicate with us
when you make a payment
automatically through cookies, analytics and technical systems
from service providers assisting us in operating HSCAssociate

Where reasonably practicable, we collect personal information directly from the person concerned or their parent or guardian.

4. How We Use Personal Information

We may use personal information to:

create and manage user accounts
provide access to the HSCAssociate Platform
provide educational resources and products
provide marking, feedback and educational tools
generate or personalise educational content and feedback
monitor student progress and Platform activity
provide online classes and tutoring-related services
respond to enquiries and provide customer support
process purchases, subscriptions and refunds
communicate important information about an account or service
send resources or communications requested by a user
improve our Platform, educational content and services
analyse usage, reliability and performance
prevent misuse, fraud or security incidents
maintain business, payment and compliance records
resolve complaints, disputes or support requests
comply with legal obligations

5. Artificial Intelligence and Educational Processing

Some HSCAssociate features use artificial intelligence or automated systems to provide educational functions such as marking, feedback, question generation, study assistance or other learning support.

Information submitted to these features may be processed by HSCAssociate systems and by technology providers that help us operate those features.

AI-generated marking, feedback and educational content is designed to assist learning. It should not be treated as an official school, NESA or examination result.

We take reasonable steps to limit the personal information sent to external technology providers to what is reasonably necessary for the relevant service.

Students should avoid including unnecessary sensitive personal information in essays, responses, prompts or other work submitted through the Platform.

6. Payments

Payments may be processed through third-party payment providers such as Stripe.

These providers may collect and process payment information in accordance with their own privacy policies and security standards.

HSCAssociate may receive transaction information from those providers, including whether a payment succeeded or failed, transaction identifiers, payment method information in a limited or masked form and information necessary to administer subscriptions, purchases, refunds and disputes.

We do not generally receive or store complete payment card numbers.

7. Third-Party Service Providers

We use third-party providers to operate and support HSCAssociate.

These may include providers of:

cloud hosting and infrastructure
databases and authentication
payment processing
artificial intelligence services
website hosting
analytics
email delivery
customer communications
security and fraud prevention
video conferencing
error monitoring and technical support

We may disclose personal information to these providers where reasonably necessary for them to provide services to us.

We seek to use reputable providers and appropriate contractual, technical and organisational safeguards.

8. Overseas Processing and Disclosure

Some of our technology and service providers operate infrastructure outside Australia.

As a result, personal information may be processed, stored or accessed in countries outside Australia, including the United States, and potentially other countries in which our service providers operate infrastructure or personnel.

Where required, we take reasonable steps in relation to the handling of personal information by overseas service providers.

The locations used by technology providers may change over time as their infrastructure changes.

9. Marketing and Educational Communications

We may send you communications relating to:

a product or service you use
account administration
tutoring or class administration
requested resources
study support
HSCAssociate products, services or educational opportunities

Where required, we will seek consent before sending marketing communications.

Marketing emails will provide a way to unsubscribe from future marketing communications.

Unsubscribing from marketing will not necessarily prevent us from sending transactional or service-related communications that are necessary to operate your account or provide a service you have purchased.

10. Cookies and Analytics

We may use cookies and similar technologies to:

keep users signed in
operate essential Platform functionality
remember preferences
understand how our websites and Platform are used
measure performance
identify technical problems
improve our products and services

Some analytics and technology providers may collect information directly from a user's browser or device.

11. Children and Students

HSCAssociate is designed in significant part for secondary school students, some of whom may be under 18.

We recognise that information relating to children and young people requires particular care.

Where appropriate, we may require or rely on involvement from a parent or guardian for purchases, tutoring arrangements, account administration or other services involving minors.

We do not intentionally require students to provide sensitive personal information that is unnecessary for the educational service.

Parents and students should contact us if they have concerns about information held in relation to a student account.

12. Security

We take reasonable technical and organisational steps to protect personal information against misuse, interference, loss, unauthorised access, modification and disclosure.

Measures may include:

access controls
authentication
restricted administrative permissions
secure cloud infrastructure
encryption where supported and appropriate
monitoring and logging
limiting access to personal information to people and systems that reasonably require it

No internet-based service can guarantee absolute security.

If we become aware of a data breach, we will assess and respond to it in accordance with applicable legal requirements.

13. How Long We Keep Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

provide products and services
administer accounts
maintain transaction and business records
resolve disputes
meet legal, accounting and compliance obligations
maintain security and prevent abuse

Retention periods may differ depending on the type of information.

Where information is no longer reasonably required, we may delete, destroy or de-identify it, subject to any legal or legitimate business requirement to retain it.

14. Accessing or Correcting Your Information

You may contact us to request access to personal information we hold about you or to ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

We may need to verify your identity before responding to a request.

In some circumstances, the law may permit or require us to refuse access to particular information. If this occurs, we will provide an explanation where required.

For a student who is under 18, we may need to consider whether a request should be handled with the student, a parent or guardian, or both, depending on the circumstances.

Requests can be made using the contact details in section 18.

15. Account Deletion and Data Requests

Users may contact us if they wish to close an account or request deletion of personal information.

Closing an account does not necessarily mean that every record can immediately be deleted. We may retain information where reasonably necessary for legal, payment, dispute-resolution, fraud-prevention, security or record-keeping purposes.

Where information is no longer required to be retained, we may delete or de-identify it.

16. Privacy Complaints

If you believe HSCAssociate has mishandled your personal information, you may contact us using the details below.

Please provide enough information for us to understand and investigate the issue.

We will consider the complaint and aim to respond within a reasonable period.

Where applicable, if you are not satisfied with our response, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC).

Information about privacy complaints is available through the OAIC website.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

our products and services
technology providers
information-handling practices
legal or regulatory requirements

The current version will be published on our website with its most recent update date.

Material changes may also be communicated to users where appropriate.

18. Contact Us

For privacy questions, requests for access or correction, complaints or other privacy enquiries, contact:

HSCAssociate Pty Ltd Email: info@hscassociate.com.au

You may also contact us through the support or contact options available on the HSCAssociate website.