Privacy Policy

Last updated 21 October 2026. This policy is general information about how this site handles data. It is not legal advice.

Who we are

Gold Coast Schools (“we”, “us”) runs this website. Contact: [contact email]. We aim to handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

What we collect

• Account: your email address (your login) and a one-way argon2id hash of your password. We never store your password itself.
• Subscription and purchases: your plan and its status, renewal or end date, whether you have paid, the amount and Stripe reference ids (customer, subscription, checkout session, payment). We never see or store your card details; Stripe collects and holds those, including to charge your yearly renewal.
• Security logs: login and sign-up attempts (IP address, email entered, time) so we can block password guessing.
• Server logs: our host, Railway, keeps standard request logs (such as IP address and pages requested).

We do not use advertising or analytics cookies, and we don’t sell or rent personal information.

Cookies

sia_session is a signed cookie that keeps you logged in for up to 30 days. sia_claim is a short-lived (2 hour) cookie that links a payment to account set-up. Both are strictly necessary and are not used for tracking.

Third parties

• Stripe processes payments as our payment processor under its own privacy policy (stripe.com/privacy). Stripe may store data outside Australia.
• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) supplies the Roboto font, so Google receives your IP address when pages load.
• Wikimedia Commons and Flickr serve school photos, so they receive your IP address when images load.
• Railway hosts the site and database. These providers may process data overseas, including in the United States.

Why we use it

To create and secure your account, confirm your payments, give you access while your plan is active, renew or end your plan as you choose, handle refunds and answer your questions. We use your email to contact you only about your account or plan.

Retention and deletion

We keep account and purchase records while your account is active and for as long as needed for tax and accounting records (generally up to 7 years for payment records). Security logs are kept for a short period. You can ask us to delete your account at any time by emailing [contact email]; we will delete or de-identify your account data, except records we must keep by law.

Access, correction and complaints

You can ask to see or correct the personal information we hold about you by emailing [contact email]. If you have a privacy complaint, contact us first. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We may update this policy and will change the date above when we do.