Back to IvoryPARENT INFORMATION

Privacy policy

How Ivory handles family and student information, why we need it and how you can ask us to review it.

Updated 3 November 2026ABN 63 858 539 736

Who handles your information

Ivory Tuition Co. uses Parent Support as the contact point for privacy questions and requests. The business owner oversees access, retention and responses. Our staff and tutors are based in Australia.

We limit access to information needed for the person’s role. The owner can access enquiries and support messages; a matched tutor receives the information reasonably needed to provide the agreed lessons.

Information we collect

We may collect parent and student names, contact details, school stage and year level, subjects, learning goals, lesson preferences, availability and time zone, the address for at-home lessons, booking and payment records, and communications about the service. Safety reports may include information about a concern and the people involved.

With appropriate permission, we may collect school reports, assessment results and relevant learning-support information when reasonably necessary to tailor tutoring. Where this includes sensitive or health information, we seek specific consent unless collection is otherwise permitted or required by law. We consider the student’s age and capacity as well as the parent or guardian’s authority.

Please do not send medical reports, identity documents or card details through the general website forms. If a document is needed, Parent Support will agree a suitable way to provide it. Our hosting and security services may process technical information, such as network and browser information, to deliver and protect the website.

Why we use and share it

We use information to respond to enquiries, match tutors, plan and provide lessons, manage bookings and payments, resolve concerns, protect students and meet applicable legal obligations.

We may share necessary information with the assigned tutor, service providers supporting our operations, professional advisers or authorities where appropriate and lawful. We do not sell personal information. We do not use information for an unrelated purpose without permission or another lawful basis.

We use first-party daily totals to understand which public pages lead to enquiry clicks and how often the enquiry form is started, reviewed and submitted. These analytics do not store names, contact details, form answers, children’s information, IP addresses, referrers, query strings or visitor identifiers, and do not set analytics cookies or use advertising pixels. We respect browser Do Not Track and Global Privacy Control signals. Saved enquiry totals are counted separately from our existing private records; they do not mean a booking or payment has occurred.

We also use Google Ads conversion measurement on public pages to understand which ads lead to a successfully submitted tutoring enquiry. Google may process browser/device information, advertising click identifiers and cookies for attribution. We send a random enquiry reference to prevent duplicate counting, not your name, contact details, child’s information or form answers. Enhanced conversions and personalised advertising signals are disabled. We respect Do Not Track and Global Privacy Control and exclude signed-in owner and administrative pages. Google processes this information under its privacy policy at https://policies.google.com/privacy.

Website and other service providers

Website enquiries and support messages are stored through the website’s hosting infrastructure, provided through ChatGPT Sites and Cloudflare. Access to the enquiry and support inbox is restricted to the authorised owner account.

When address suggestions are available, the address you type is sent to Google Maps Platform to find matching Australian addresses. Choosing a suggestion fills in your address fields, which you can review and edit. You can instead choose to enter your address manually.

Email, meeting, booking and payment services will use the providers identified when those services are offered. We assess the information needed and the provider’s privacy and security arrangements before use.

Having Australian staff does not mean every technology provider processes all data in Australia. Cloud providers may use overseas infrastructure or support. We do not promise Australian-only data storage. Where overseas handling is relevant, we will provide the information required by applicable law and use appropriate safeguards.

Marketing, recordings and student images

Submitting an enquiry or booking a lesson does not automatically subscribe you to promotional messages. We obtain appropriate permission for marketing and provide a simple way to unsubscribe. We action unsubscribe requests within five working days. Necessary booking and service messages may still be sent.

Recording, transcription and AI meeting assistants are off by default. Any proposed use requires specific informed permission addressing the purpose, access and retention period, with parent and student involvement appropriate to the student’s age and capacity.

Student photos, work and testimonials are used in marketing only with separate, voluntary permission. You can withdraw permission for future use by contacting Parent Support. We will explain any practical limits on recalling material already distributed.

How long we keep information

We keep information only while it is needed for the stated purpose, an applicable legal obligation or a properly documented dispute or safety hold. The following schedule guides deletion and review; a legal requirement can override it.

RecordUsual retention or review
Enquiries that do not become bookingsDelete after 12 months without substantive contact.
Routine learning notesReview and normally delete 24 months after the last lesson.
School reports and learning-support documentsReview at least annually; target deletion within 90 days after their specific purpose ends.
Authorised lesson recordingsDelete from active storage within 30 days unless a different necessary period was specifically agreed.
Financial and essential contract recordsKeep for seven years for administration, recordkeeping and dispute purposes, subject to applicable law.
Actual or alleged child sexual abuse recordsKeep for at least 45 years from creation; other safety records require an individual retention assessment.
Marketing recordsKeep while permission and a valid purpose continue; review after 24 months of inactivity. Keep minimal suppression details to respect an unsubscribe.

Security and your requests

We use restricted access, account security and proportionate technical and organisational safeguards. No online system is completely risk-free. If an incident occurs, we will contain it, assess the impact and notify affected people and regulators where required by law.

You can ask Parent Support to access or correct information, withdraw a permission or consider deletion. We may need to verify your identity and authority. If information must be retained or a request cannot lawfully be granted, we will explain why. Deletion from provider backups may follow the provider’s normal secure backup cycle.

We normally acknowledge routine requests within one to two business days and explain the expected response process. If you are dissatisfied, ask for a review. You may also contact the relevant regulator, including the Office of the Australian Information Commissioner where it has jurisdiction, or Victoria’s Health Complaints Commissioner for applicable health-information matters.