What we collect, and how we protect it.

This policy explains how TutorForAll, operated by NSW Education Institute, handles your personal information. It covers two places: this website, and the learning platform where accounts, bookings, payments and documents live.

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). This policy is not legal advice, and we may update it as the platform grows.

This website has one form: the interest form. If you choose to send it, we receive:

• your name,
• your email address,
• the role you pick (student, parent, tutor or supporter), and
• an optional message, if you write one.

That is the whole list. Nothing is collected until you press send — browsing this site sends us nothing about you. Like almost every website, our hosting provider keeps standard technical access logs (such as IP address and the page requested) for security and reliability, kept only as long as needed for those purposes.

We use interest-form details for one thing: to contact you about the reason you got in touch. We do not sell, rent or share them for marketing.

When you use TutorForAll to learn, teach, book or pay, the learning platform collects what it needs to run the service:

• Account details — name, contact details, role and login.
• Profile information — for tutors, your qualifications, subjects, rates, availability and bio.
• Booking and lesson records — who booked what, when, and progress notes.
• Payment records — handled by Stripe (see Part 05); we keep the record of a payment, not your full card number.
• Documents — including Working with Children Check documents, identity and qualification certificates, held in a secure vault on the platform.
• Lesson recordings — every online lesson is recorded, with every participant’s consent (families at booking, tutors once, on file with the date). Recordings are watched in place on the platform by that lesson’s tutor and family only, every access is logged, and they are deleted automatically 12 months after the lesson. A parent or student can ask us to delete a specific recording sooner once any open safety concern or dispute about that lesson is resolved. Recordings — especially of children — are treated as sensitive personal information.

We collect this to run bookings and payments, verify tutors, keep children safe, meet our legal obligations, and support you when you ask.

A student under 18 uses TutorForAll through a parent or guardian, who sets up and manages the account and follows progress through their own login.

We collect the minimum needed to arrange safe tutoring, and we treat a child’s information with extra care. Working with Children Check documents and certificates are held under access controls and kept only as long as we need them for safety and legal reasons. A parent or guardian can ask to see, correct or remove their child’s information at any time.

Payments run through Stripe, our payment processor. When you pay, your card details go straight to Stripe over an encrypted connection — TutorForAll never sees or stores your full card number. This keeps card-security (PCI) handling with Stripe, who specialises in it.

Stripe processes your payment information under its own privacy terms. We receive the record that a payment succeeded, so we can confirm your booking and pay your tutor.

Personal information on the platform is stored under access controls, so people only see what their role needs. Sensitive documents, such as WWCC records, sit in a restricted vault with an audit trail.

We use encryption in transit, keep information only as long as we need it, and dispose of it securely after that. No system is perfectly secure, but we take reasonable steps to protect your information and will tell affected people if a serious breach occurs, as the law requires.

We do not sell your information. We share it only where it is needed to run the service:

• with your tutor or the family you are matched with, to arrange and run a booking;
• with Stripe, to take payment;
• with service providers who host and support the platform, under confidentiality;
• and where the law requires it, or to keep someone safe.

At the time of writing, this website sets no cookies, runs no analytics scripts, and loads no advertising or social-media trackers. There is nothing to accept, which is why there is no cookie banner. The learning platform uses only the cookies it needs to keep you logged in.

If we ever add analytics or a non-essential cookie, we will update this page before the change ships.

You can ask what we hold about you, ask us to correct it, or ask us to delete it where we are able to. Parents and guardians can make these requests for their child. Email hello@nswedu.com.au and a person will reply.

If you are not happy with how we have handled a privacy request, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). This policy is issued by NSW Education Institute, operating TutorForAll. See also our Terms of Service.