Privacy Policy

The short version

1. Who we are

This policy covers the HSC holiday courses run by Sandbox Learning Australia Pty Ltd (ABN 34 620 334 741), trading as Sandbox Learning. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

2. What we collect

• When you register interest: your name and email, whether you're a parent or student, the student's name or a parent's email, subjects, and optionally school, mobile and how you heard about us.
• When you book: the payer's name, email and phone, the student's name and school, the course booked and, if you're booking with a friend, their name. Stripe collects payment details directly.
• During a course: attendance, the student's practice work (including the timed task), and session recordings (see section 4).
• When you use the website: pages visited and how you arrived (for example, which flyer or Facebook post), collected through Google Analytics, which uses cookies. You can block or delete cookies in your browser settings.

3. How we use it

• To manage bookings, confirm whether a course is running, and send course information and reminders.
• To send a few emails about future courses, if you've agreed. Every email has an unsubscribe link.
• To give students general feedback on their practice work.
• To process refunds and transfers, and keep the records the law requires.
• To understand, in aggregate, which notices and pages work, so we can improve the courses and site.

4. Session recordings

We record the teaching in each session so students who miss part of a course can catch up. Recordings focus on the teacher and the board, not on students, and are shared only with students enrolled in that course. Students' voices may be heard if they ask a question. If you'd rather a student not appear at all, tell us and we'll seat them out of view. We delete recordings after 30 November 2027.

5. Students under 18

Most of our students are under 18. We ask for a parent's details whenever a student registers or books, and we send booking information to parents. Students can register interest themselves, but a parent or guardian makes the booking.

6. Who we share it with

We share information only with the service providers that help us run the courses, and only for that purpose:

• Stripe, for payments.
• Netlify, which hosts this website and receives interest-form submissions.
• Google Workspace, for email and file storage, and Resend, for booking confirmations and course updates.
• Google Drive, for session recordings, shared only with enrolled students' email addresses.
• Google Analytics, to understand how visitors find and use this website.

Some of these providers may store information outside Australia, including in the United States. We choose providers with strong security practices. We may also disclose information where the law requires it.

7. How we store and protect it

Information is stored with the providers above, protected by access controls and encryption in transit. Only people who run the courses can see it.

8. How long we keep it

We keep booking and payment records for as long as tax law requires (generally five years). We keep interest-list details until you unsubscribe or ask us to delete them, and course work and feedback until 30 November 2027.

9. Your choices

• Unsubscribe from emails at any time, using the link in any email.
• Ask to see or correct the information we hold about you or your child.
• Ask us to delete it, except records we must keep by law.

Email hsc@sandboxlearning.com.au and we'll respond within 30 days.

10. Questions and complaints

If you have a question or complaint about how we've handled your information, email hsc@sandboxlearning.com.au (hsc@sandboxlearning.com.au). If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.