Privacy Policy

About This Policy

This Privacy Policy applies to all products, services, and websites operated by Class Education Pty Ltd trading as Class Mathematics, including classmathematics.com.au, shop.classmathematics.com.au, and portal.classmathematics.com.au, and to forms and pages we run on Facebook and Instagram.

We are committed to handling your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our services, you consent to the collection and use of your information as described in this policy.

If you do not agree with this policy, please discontinue use of our services. If you are under the age of 18, please ensure a parent or guardian has reviewed and agreed to this policy on your behalf.

Who We Are

Class Mathematics is an Australian mathematics education platform operated by:

Legal entity	Class Education Pty Ltd
Trading name	Class Mathematics
ABN	63 630 539 758
Country	Australia
Contact email	hello@classmathematics.com.au

We provide curriculum-aligned mathematics resources to students, parents, teachers, tutors, and schools across Australia.

What Personal Information We Collect

The personal information we collect depends on how you interact with our platform. We only collect information that is reasonably necessary for our services.

Account & Registration Information

Information	Why we collect it
Full name	To personalise your account and communications
Email address	To create your account, send transactional emails, and communicate with you
State / territory	To show you curriculum-aligned content for your state's syllabus
Year level	To show you relevant questions and resources for your stage of study
User type (student, teacher, tutor, parent)	To tailor the platform experience to your role
School name (optional)	To understand which schools use our resources and to support school accounts
Password (encrypted)	To secure access to your account

Payment Information

When you purchase a subscription or product, payment processing is handled securely by Stripe and Shopify Payments. We do not store your full card details on our systems. We may retain:

• Your name and billing address (as provided at checkout)
• The last four digits of your card and card type (stored by Stripe/Shopify for reference)
• Transaction history and subscription status

Session & Device Information

To protect your account from unauthorised access, prevent account sharing in breach of our Terms, and maintain the integrity of our subscription model, we collect information about each session in which your account is used. This includes:

• IP address from which you log in or access the platform
• Device fingerprint — a hashed identifier derived from technical characteristics of your device (such as browser type, operating system, screen resolution, and timezone)
• Device cookie — a unique identifier stored in your browser to recognise your device on return visits
• Browser and operating system information (user agent string)
• Login and session timestamps, including the time of login, last activity, and logout
• Approximate geographic location (city or region level), derived from IP address
• Session events, such as login attempts, forced logouts, and concurrent session conflicts

This information is treated as part of your personal information and is protected in the same way as the other categories described in this policy. See Section 6 — Account Security & Session Data for further detail on how this information is used.

Usage & Analytics Information

We collect information about how you use our platform to improve our services. This includes:

• Pages visited, features used, and time spent on the platform
• Device type, browser type, and operating system
• Approximate location (country/state level, derived from IP address)
• Referring website or search query that brought you to our site
• Heatmap and session recording data (via Hotjar) to understand how users interact with our pages

Advertising & Campaign Information

When you arrive at our websites from an advertisement or a link we have shared, we record which campaign brought you to us, so we can understand which of our ads and posts are useful. This includes:

• Campaign tags in the link you followed (for example utm_source and utm_campaign) and click identifiers added by advertising platforms (such as Facebook's fbclid or Google's gclid)
• The referring website and the first page you landed on
• Key actions on our public pages, such as viewing an offer, creating an account, starting a free trial or subscribing — recorded by the Meta Pixel and Google Ads tags (see Section 11)

Communications

If you contact us directly — by email, through a contact form, via a free quiz builder, or by sending us a message or comment on Facebook or Instagram — we may retain the contents of that communication and your contact details in order to respond to you and keep a record of our correspondence.

How We Collect Your Information

We collect personal information in the following ways:

• Directly from you — when you create an account, make a purchase, complete a form, build a free quiz, or contact us
• Automatically — when you use our platform, through cookies, analytics tools (Google Analytics 4), session recording tools (Hotjar), advertising measurement tools (the Meta Pixel and Google Ads tags), and our session and device logging systems
• From third parties — when you make a purchase through our Shopify store, Shopify passes order and customer information to us in order to fulfil your order and manage your subscription
• Through Facebook and Instagram forms — if you complete one of our forms on Facebook or Instagram (for example, to claim a free offer or download a free resource), Meta passes the details you submit to us: typically your name, email address, whether you are a teacher, tutor or parent, your state, and your answer to any consent question. We use these details to set up what you asked for — for example, creating your account and emailing you a link to set your password — and as described in this policy

We do not collect sensitive information (such as health, racial or ethnic origin, political opinions, or biometric data) and we do not purchase or acquire personal information from data brokers or marketing lists.

How We Use Your Information

We use your personal information only for the purposes for which it was collected, or for directly related purposes you would reasonably expect. These include:

Purpose	Details
Providing the service	Creating and managing your account (including accounts requested through our Facebook or Instagram forms), delivering curriculum-aligned content, processing payments, and managing subscriptions
Personalisation	Showing you content relevant to your state, year level, and user type
Account security	Authenticating logins, detecting unauthorised access, enforcing single-session usage, and protecting your account from misuse
Terms enforcement	Identifying breaches of our Terms of Service, including unauthorised account sharing
Transactional communications	Sending account confirmations, password resets, purchase receipts, and subscription notifications
Marketing communications	Sending you educational resources, product updates, and relevant offers — only where you have opted in or where permitted under the Spam Act 2003
Advertising measurement	Understanding which of our ads lead to sign-ups, trials and purchases, so we spend our advertising budget sensibly. This involves sharing limited information with Meta and Google, as described in Section 7 — Advertising partners
Advertising audiences	Making sure we don't show offers for new customers to people who already use Class Mathematics, and — only for adults who have agreed to receive marketing from us — showing our ads to them, or to people with similar interests, on Facebook and Instagram
Platform improvement	Analysing usage data to understand how our platform is used and to improve the experience
Customer support	Responding to enquiries, resolving issues, and managing complaints
Legal obligations	Complying with applicable laws, regulations, and legal processes

Account Security & Session Data

Class Mathematics subscriptions are licensed to a single named individual. To protect your account, deter unauthorised access, and enforce this single-user requirement, we operate an automated session monitoring system. This section explains exactly what that involves.

What we record

Each time you (or anyone using your account credentials) logs in or interacts with the platform, we record a session entry containing the information described in Section 3 — Session & Device Information. This includes IP address, device fingerprint, device cookie, browser and operating system details, and timestamps of activity.

How we use this information

• Single-session enforcement — only one active session is permitted per account. When a new login occurs on a different device, the previous session is automatically ended. The previous device will see a notification explaining that the account has been signed in elsewhere.
• Detecting unauthorised access — unusual login patterns (such as logins from multiple geographic regions in a short time, or from a high number of distinct devices) may indicate that your account has been compromised or is being shared in breach of our Terms.
• Audit history — if there is a dispute about activity on your account, we can review the session log to determine when, where, and from what type of device the account was used. You may request your own session history by contacting us.
• Terms enforcement — where the session log indicates that an account is being shared in breach of our Terms of Service, we may contact the account holder, suspend the account, or terminate the subscription. See our Terms of Service for the relevant provisions.

What we do not do

• We do not use session or device data (the security logs described in this section) for advertising or marketing purposes
• We do not sell or share session or device data with third parties for their commercial purposes
• We do not use device fingerprinting to identify you outside the Class Mathematics platform

Disclosure to Third Parties

We do not sell your personal information. We share your information only with trusted service providers who help us operate our platform, and with the advertising partners described below, and only to the extent necessary for those purposes.

Third Party	Purpose	Data Shared
Stripe	Payment processing for portal subscriptions	Name, email, billing address, payment details
Shopify	E-commerce store and payment processing	Name, email, billing/shipping address, order details
dotdigital	Email marketing and automated email sequences	Name, email address, user type, state, purchase history
Google Analytics 4	Website analytics and usage reporting	Anonymised usage data, device/browser information
Google Ads	Measuring which Google ads lead to visits and sign-ups	Ad click identifiers, pages visited and actions taken on our public pages
Meta Platforms (Facebook and Instagram)	Advertising measurement, advertising audiences, and our Facebook/Instagram forms and pages	See Advertising partners below
Hotjar	Session recording and heatmap analysis	Anonymised interaction data (no personal identifiers)
Microsoft Azure	Hosting of the student/teacher portal and storage of session and device logs	Account data and session logs stored in Azure data centres

Advertising partners (Meta)

We advertise on Facebook and Instagram, which are operated by Meta Platforms. To measure whether our ads work and to show them to the right people, we share the following with Meta:

• Website activity — when you visit our public pages (such as offer, sign-up and pricing pages), the Meta Pixel and our server tell Meta about key actions like viewing an offer, creating an account, starting a free trial or subscribing. This is sent together with technical details Meta uses to match the action to an ad (your IP address, browser information, and Meta cookie or click identifiers)
• Hashed contact details — your email address (and phone number, if you gave it to us), converted into an irreversible code ("hashed") on our systems before it is sent. Meta uses these codes only to match them to its own users. We use this to measure which ads lead to sign-ups, to exclude existing customers from offers meant for new customers, and — only if you have agreed to receive marketing from us — to show you our ads or to find people with similar interests
• Form details — if you fill in one of our forms on Facebook or Instagram, Meta collects the details on our behalf and passes them to us

We never send Meta student information, and we never use student information to target advertising.

Meta processes this information under its own terms and privacy policy, which you can read at facebook.com/privacy/policy. You can control the ads you see on Facebook and Instagram in your Meta ad preferences, and you can ask us to stop including you in our advertising audiences at any time (see Section 10).

Overseas disclosure

Some of the providers above store or process information outside Australia, including in the United States, Ireland and other countries where they operate data centres (for example Stripe, Shopify, Google, Hotjar and Meta). We take reasonable steps to ensure these providers handle your information consistently with the Australian Privacy Principles.

All service providers are required to handle your information in accordance with applicable privacy laws, and we do not authorise them to use your information for their own marketing purposes. Advertising partners such as Meta and Google also process the limited information described above under their own terms.

We may also disclose your information where required by law, court order, or government authority, or where we believe disclosure is necessary to protect the safety of any person or to prevent fraud or illegal activity.

Storage & Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:

• Encrypted storage of passwords (hashed and salted — never stored in plain text)
• HTTPS encryption across all our web properties
• Restricted internal access to personal data on a need-to-know basis
• Payment data handled exclusively by PCI-DSS compliant providers (Stripe and Shopify)
• Session and device data stored in secured databases on Microsoft Azure infrastructure, accessible only to authorised personnel for security and compliance purposes
• Email addresses and phone numbers hashed before they are shared with advertising partners
• Regular review of our security practices and third-party integrations

Our portal is hosted on Microsoft Azure infrastructure. While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. If you become aware of any security vulnerability or breach, please contact us immediately at hello@classmathematics.com.au.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Data Type	Retention Period
Account information	For the duration of your account, plus up to 2 years after account closure
Purchase and transaction records	7 years (as required for financial record-keeping under Australian law)
Session and device logs	Up to 24 months from the date of the session, after which records are automatically deleted or de-identified
Marketing email engagement data	Until you unsubscribe or request deletion, whichever is sooner
Campaign and advertising data	Kept with your account or enquiry record for as long as that record is kept. Hashed lists we share with Meta are refreshed regularly, so people who opt out or close their account are removed at the next refresh
Analytics data (GA4, Hotjar)	As per Google's and Hotjar's data retention settings (typically 14 months for GA4)
Customer support correspondence	Up to 3 years after the matter is resolved

When your data is no longer required, we will take reasonable steps to destroy or de-identify it securely.

Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you, including your session and device log
• Correct any personal information that is inaccurate, out of date, or incomplete
• Request deletion of your personal information, subject to our legal obligations to retain certain records
• Withdraw consent to marketing communications at any time
• Opt out of advertising audiences — ask us to stop including you in the audiences we share with Meta
• Make a complaint about how we have handled your personal information

To exercise any of these rights, please contact us at hello@classmathematics.com.au. We will respond to all requests within a reasonable time — generally within 30 days. In some cases, we may ask you to verify your identity before processing your request.

If you are not satisfied with our response to a privacy complaint, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Cookies & Analytics

We use cookies and similar tracking technologies on our websites. Cookies are small text files stored on your device that help us provide and improve our services.

Types of cookies we use

Type	Purpose	Examples
Essential	Required for the platform to function — including keeping you logged in and processing transactions	Session cookies, authentication tokens
Security	Identify your device for the purposes of session enforcement and account protection	Device cookies, fingerprint identifiers
Analytics	Help us understand how visitors use our site so we can improve it	Google Analytics 4
Behaviour	Record how users interact with our pages to help us identify usability issues	Hotjar session recordings and heatmaps
Marketing	Help us understand which campaigns bring visitors to our site and which ads lead to sign-ups and purchases, and remember which campaign you came from	Google Ads conversion tracking; Meta Pixel (cookies such as _fbp and _fbc); our own campaign-source cookie

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Please note that disabling essential or security cookies may affect the functionality of our platform — including your ability to remain logged in and to use the portal at all.

For more information about how Google uses data collected through our site, visit policies.google.com. For Meta's use of data from the Meta Pixel, visit facebook.com/privacy/policy. For Hotjar's privacy practices, visit hotjar.com/legal/policies/privacy.

Children's Privacy

Our platform is designed for use by students, including those under the age of 18. We recognise the importance of protecting children's privacy and take additional care in this area.

Where a user is under 18, we expect that a parent or guardian has reviewed this privacy policy and consented to the collection and use of that student's personal information on their behalf — including the session and device data described in Section 6. We encourage parents and guardians to be involved in their child's use of our platform.

We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If you believe we have inadvertently collected information from a child under 13 without appropriate consent, please contact us at hello@classmathematics.com.au and we will take steps to delete that information promptly.

We do not display targeted advertising to users we know to be under 18. Our Facebook and Instagram ads are directed only at adults (18 and over) — teachers, tutors and parents. We never share student information with Meta or any other advertising partner, and we never include students in advertising audiences.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will update the "Last updated" date at the top of this page.

If we make material changes that significantly affect how we handle your personal information, we will notify registered users by email or by displaying a prominent notice on our platform before the changes take effect.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes your acceptance of the updated policy.