Privacy Policy

Introduction

TinkerTank, operated by Project School PTY LTD, is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or participate in our programs. We comply with the Australian Privacy Act 1988 (Cth) and the General Data Protection Regulation (GDPR).

1. Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Student Information: Age, grade level, learning preferences, educational progress
• Payment Information: Billing details, payment method information (processed securely through third-party providers)
• Emergency Contacts: Parent/guardian contact details for minors
• Special Requirements: Dietary restrictions, medical conditions, accessibility needs

Technical Information

• IP address and browser information
• Device type and operating system
• Website usage data and analytics
• Cookies and similar tracking technologies

Educational Data

• Learning progress and assessment results
• Project submissions and creative works
• Attendance records and participation data
• Photos and videos of educational activities (with consent)

2. How We Use Your Information

We use your personal information for the following purposes:

• Program Delivery: To provide educational services, manage enrollments, and facilitate learning experiences
• Communication: To send program updates, schedules, and important announcements
• Safety & Security: To ensure the safety of all participants and comply with child protection requirements
• Improvement: To analyze and improve our programs, services, and website functionality
• Marketing: To send promotional materials about new programs and events (with your consent)
• Legal Compliance: To meet our legal obligations and protect our rights

3. Children's Privacy

We take special care when handling information about children under 18. We:

• Only collect necessary information for program participation
• Require parental/guardian consent for all data collection and use
• Implement additional security measures for children's data
• Do not sell or rent children's personal information to third parties
• Allow parents to review, update, or delete their child's information

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With trusted third parties who assist in program delivery (payment processors, technology platforms)
• Emergency Situations: With emergency contacts or medical professionals when necessary for safety
• Legal Requirements: When required by law, court order, or government authority
• Business Transfers: In connection with mergers, acquisitions, or asset sales (with notification)
• Consent: When you have given explicit consent for specific sharing

We never sell your personal information to third parties for marketing purposes.

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption of sensitive data in transit and at rest
• Regular security audits and vulnerability assessments
• Access controls and staff training on data protection
• Secure payment processing through PCI-compliant providers
• Regular backups and disaster recovery procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest standards.

6. Your Rights and Choices

Under Australian privacy law and GDPR, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request transfer of your data to another provider
• Opt-out: Unsubscribe from marketing communications at any time
• Complaint: Lodge a complaint with us or relevant privacy authorities

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and login status
• Analyze website traffic and user behavior
• Provide personalized content and experiences
• Enable social media features and advertising

You can control cookie settings through your browser preferences. However, disabling cookies may affect website functionality.

8. Data Retention

We retain personal information for different periods based on:

• Active Participants: While enrolled and for 2 years after program completion
• Financial Records: 7 years as required by Australian tax law
• Marketing Data: Until you opt-out or we determine it's no longer needed
• Website Analytics: 2 years for performance analysis

We securely delete or anonymize information when no longer needed.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Australia. When this occurs, we ensure appropriate safeguards are in place through:

• Adequacy decisions by the Australian Government
• Standard contractual clauses
• Certification schemes and codes of conduct
• Explicit consent for specific transfers

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes through:

• Email notification to registered users
• Prominent notice on our website
• In-person notification for current program participants

Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Information

For any privacy-related questions, concerns, or requests:

Privacy Officer
Email: privacy@tinkertank.rocks
Phone: 1300 670 104
Address: 50 Yeo St, Neutral Bay, NSW, 2089

Australian Privacy Complaints:
Office of the Australian Information Commissioner (OAIC)
Website: www.oaic.gov.au
Phone: 1300 363 992

By using our services, you acknowledge that you have read, understood, and agree to this Privacy Policy.