Privacy Policy

What information does this policy cover?

This privacy policy explains how Braintree Coaching Australia handles the personal information of parents, carers and students who contact us or use our services. It applies to https://braintreecoaching.com.au and any subdomains we use to deliver our coaching services, including information collected through our website, enquiry and booking forms, and email correspondence. Our online learning platform at classroom.braintreecoaching.com.au is included — students sign in there for courses and mock tests, and parents complete online enrolment checkout on that site. We are an Australian exam-preparation provider (not the PayPal payments service of a similar name), and we are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APP 1 — open and transparent management of personal information).

If you only want to read about the website (the brand, our exams or our courses) without contacting us, you do not need to give us any personal information to do so.

Who is responsible for your information?

Braintree Coaching Australia is the entity accountable for the personal information described in this policy. Our details are:

• Entity: Braintree Coaching Australia
• ABN: 87 681 295 223
• Location: Sydney, New South Wales, Australia
• Privacy officer: privacy@braintreecoaching.com.au

Our privacy officer is the single point of contact for any question, request or complaint about how we handle your family's information.

What personal information do we collect?

We collect only the information you choose to give us through a form or an email — we do not build hidden profiles. When you submit a contact, welcome-pack, mock-test, trial-booking, course-enquiry or newsletter form, we collect the fields below (APP 3 — collection of solicited personal information; APP 5 — notification of collection).

| Data we collect | Why we collect it | Where it is stored / who processes it | How long we keep it | | --- | --- | --- | --- | | Parent or carer name | To address you personally when we reply | Neon Postgres database, Sydney (AU) region | 24 months from last contact; 7 years if you enrol | | Email address | To send the information you asked for and booking confirmations | Neon Postgres (Sydney); Amazon SES (Sydney) sends the email | 24 months from last contact; 7 years if you enrol | | Phone number | To call you back about an enquiry or a trial | Neon Postgres (Sydney) | 24 months from last contact; 7 years if you enrol | | Your child's year level | To recommend the right exam course | Neon Postgres (Sydney) | 24 months from last contact; 7 years if you enrol | | Your enquiry message and form answers | To understand and respond to your specific request | Neon Postgres (Sydney) | 24 months from last contact | | Consent record (the date you agreed to this policy) | To show you gave consent and when | Neon Postgres (Sydney) | For as long as we hold your record | | Page and campaign details (the page you came from) | To understand which information pages parents find useful | Neon Postgres (Sydney) | 24 months from last contact | | Enrolment and payment records | To manage your child's course and meet Australian tax and financial-record law | Neon Postgres (Sydney); Stripe transaction records where you paid online | 7 years (legal requirement) | | Payment card and billing details | To process your course enrolment fee when you pay online | Stripe on our learning platform checkout (classroom.braintreecoaching.com.au) — we do not collect card numbers on this website's enquiry forms | Per Stripe's charge-record retention; enrolment summary kept 7 years |

We do not collect government identifiers such as a Tax File Number, Medicare number or driver-licence number through our forms, and we do not use them to identify you (APP 9 — government identifiers).

We do not collect your date of birth or a postal mailing address through the enquiry, trial, welcome-pack, mock-test or newsletter forms on this website. If you mention extra details in a free-text message, we keep only what we need to answer your enquiry.

We do not ask for credit or debit card details on the enquiry, trial, welcome-pack or newsletter forms on this website. If you enrol and pay online, you enter payment details on our learning platform checkout, which is processed securely by Stripe (a payment processor). Stripe handles the card transaction; we receive confirmation of payment and the enrolment details we need to run the course, not your full card number.

What information do we collect automatically?

When you browse our website without filling in a form, we still collect a small amount of technical information so the site runs safely and we can see general use patterns (APP 5 — notification of collection). We do not use this information to build advertising profiles, and we do not sell it.

| Data we collect | Why we collect it | Where it is stored / who processes it | How long we keep it | | --- | --- | --- | --- | | Server connection details (IP address, browser type, approximate region from IP) | To run the site securely, prevent abuse, and diagnose errors | Vercel hosting (request logs); not stored in our lead database unless you submit a form | Short operational retention per our host's log policy | | Pages you view and general traffic patterns | To understand which exam information pages parents find useful and to fix slow pages | Vercel Analytics and Vercel Speed Insights when enabled (see below) | Aggregated operational telemetry | | Promo banner dismissed (bt-promo-dismissed cookie) | To remember that you closed the site-wide announcement strip | First-party cookie on your device | Up to 12 months |

When you submit a form, our team may also see your IP address and browser type in the internal alert email we use to respond to your enquiry. We do not add those details to your long-term lead record.

What cookies and analytics do we use?

Cookies are small text files stored on your device. We use a few first-party cookies and — only if you agree through our cookie banner — optional analytics tools. We do not use cookies to show personalised advertisements on this website.

Functional cookie (no banner required)

• bt-promo-dismissed — remembers if you closed the announcement strip at the top of the site. It stores only a dismiss flag, not your name or contact details. Expires after about 12 months.

Operational telemetry (no advertising; runs without the cookie banner)

• Vercel Analytics and Vercel Speed Insights — help us measure page load speed and fix performance problems. These run as first-party tools on our domain. According to Vercel, they do not use third-party advertising cookies and do not track you across other websites.

Analytics you can accept or decline (cookie banner)

When we show a cookie consent banner, you can Accept or Decline optional third-party analytics:

• If you accept, we load Google Tag Manager, which may fire Google Analytics 4 to help us understand how parents use the site (for example, which pages are read most often). We configure these tools so they do not receive your name, email, phone number, or your child's details from our forms.
• If you decline, we do not load Google Tag Manager or Google Analytics. The site continues to work normally; only the operational Vercel telemetry above still runs.

Your choice is stored in your browser (a bt:consent record in localStorage) so the banner does not keep asking on every visit. You can change your mind by clearing site data for braintreecoaching.com.au or by emailing privacy@braintreecoaching.com.au.

Our cookie banner links to this page at /policies/privacy.

Learning platform cookies

When you sign in or browse courses on classroom.braintreecoaching.com.au, that platform may set its own cookies for login, course access and checkout. Those cookies are separate from this marketing website — we do not control them here. For details, see the classroom cookie policy.

Can I deal with you anonymously?

Where it is lawful and practical, you can browse this website and read our exam and course information without telling us who you are (APP 2 — anonymity and pseudonymity). However, we cannot reply to an enquiry, confirm a trial booking, or enrol a child without at least a name and a way to contact you, because those tasks require us to know who you are.

Why do we use your information?

We use your information only for the purpose you gave it to us, and for closely related purposes you would reasonably expect (APP 6 — use or disclosure). Specifically, we use it to:

• follow up on an enquiry you have sent us;
• arrange and confirm a trial class or assessment;
• enrol your child in a course and manage that enrolment;
• send the welcome pack, sample papers or information you requested;
• keep the financial records the law requires us to keep.

We do not use your information for automated decision-making about your child, and we do not sell it to anyone.

How do we store and protect your information?

Your information is stored in a Neon Postgres database hosted in Australia (the Sydney region), and email to you is sent through Amazon Web Services Simple Email Service (SES) on our verified braintreecoaching.com.au domain (APP 11 — security of personal information). Marketing and newsletter email, when you opt in, is also sent through Amazon SES — we do not use Mailchimp or other third-party marketing-automation platforms on this website. When you pay for a course online, Stripe processes the card payment on our learning platform checkout at classroom.braintreecoaching.com.au. We protect stored information with encrypted connections (HTTPS/TLS), access controls that limit who on our team can see it, and audit logging of administrative actions.

These hosting, email and payment providers act only as our infrastructure processors — they store or transmit the data so we can run the service, and they are not permitted to use it for their own purposes. We do not share your information with advertisers, data brokers, or any third party for marketing. If a provider stores or backs up data outside Australia (including Stripe payment processing), we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles (APP 8 — cross-border disclosure).

If Braintree Coaching Australia is ever sold, merged, or transfers part of its business to another organisation, the personal information we hold may pass to the new owner so they can continue running your child's course or honour an existing enrolment. The incoming organisation would be required to handle that information under the Australian Privacy Principles, and we would let you know if the transfer materially changes how your information is used.

We may also disclose your information when Australian law requires it — for example, in response to a court order or a request from a regulator — or where we reasonably believe disclosure is necessary to prevent serious harm, fraud, or unlawful activity (APP 6 — use or disclosure). We do not disclose information for advertising or marketing through these exceptions.

No online system is ever completely secure. If you suspect a data breach, unauthorised access, or that your family's information has been exposed or misused, contact our privacy officer immediately at privacy@braintreecoaching.com.au. We handle suspected security incidents through this address — you do not need a separate security mailbox.

How long do we keep your information?

We keep your information only as long as we genuinely need it, then we delete or de-identify it.

• Enquiry and marketing leads: we delete the records of a parent who enquires but does not enrol after 24 months with no further engagement.
• Enrolment and financial records: we keep these for 7 years, because Australian tax and record-keeping law requires it.

We may keep information longer than these windows if we need it to resolve an active dispute, enforce an agreement, or respond to a legal claim. When that no longer applies, we delete or de-identify it as soon as we reasonably can.

When a retention period ends, we either delete the record or remove the details that identify you.

How do we handle a child's information?

We treat information about a child with particular care, and we collect it from a parent or carer, not from the child. Because our families are preparing children for selective, scholarship and Year 7 entry exams, the most we hold about a child is typically a first name and a year level, given to us by the parent. We rely on the consent of the parent or carer who completes the form for any collection that relates to a person under 18. We do not knowingly collect personal information directly from a child, and if you believe a child has given us information without your consent, contact our privacy officer and we will delete it.

How do unsolicited details get handled?

If we receive personal information we did not ask for — for example, extra detail written into an enquiry message — we decide whether we could have collected it under this policy. If we could not, and it is lawful to do so, we destroy or de-identify it (APP 4 — unsolicited personal information).

Will you send me marketing email?

We only send marketing or newsletter email to parents who have asked for it, and you can stop it at any time (APP 7 — direct marketing). Every marketing email includes an unsubscribe link, and you can also email privacy@braintreecoaching.com.au to opt out. Opting out of marketing does not affect emails we must send you about a course your child is enrolled in, such as a class confirmation.

How can I see, correct or delete my information?

You have the right to ask for a copy of the personal information we hold about you, to have it corrected if it is wrong, to ask us to delete it, and to receive a portable copy in a commonly used electronic format (APP 10 — quality; APP 12 — access; APP 13 — correction). To make any of these requests:

1. Email our privacy officer at privacy@braintreecoaching.com.au.
2. Tell us which request you are making — access, correction, deletion, or a portable copy — and the email address you used with us.
3. We will verify it is really you, then respond within a reasonable time (normally within 30 days).

If you ask for a copy of your information, we can provide it electronically — for example as JSON or PDF — rather than paper only. When you request export or deletion, our privacy officer verifies your identity, then completes the action using audited admin tools: export produces a JSON bundle of your records; erasure removes your personal information subject to the legal retention exceptions below. We send you a confirmation email when the action is finished.

We will delete your information on request unless we are legally required to keep it — for example, enrolment and payment records we must retain for 7 years. Where that applies, we will tell you which records we have kept and why.

How do I make a privacy complaint?

If you think we have mishandled your personal information, contact our privacy officer first at privacy@braintreecoaching.com.au, and we will investigate and respond. If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner (OAIC), the national privacy regulator, at www.oaic.gov.au or by calling 1300 363 992.

Will this policy change?

We may update this privacy policy as our services or the law change. The current version is always the one published here, and the Last updated date at the top of this page shows when it last changed. If we make a material change that affects how we use information you have already given us, we will let you know by email.

Who can I contact about privacy?

For any question about this policy or your family's information, contact:

• Privacy officer, Braintree Coaching Australia
• Email: privacy@braintreecoaching.com.au
• ABN: 87 681 295 223
• Sydney, New South Wales, Australia