Privacy Policy

About This Policy

This Privacy Policy applies to all products, services, and websites operated by ClassCoach Pty Ltd trading as Class Mathematics, including classmathematics.com.au, shop.classmathematics.com.au, and portal.classmathematics.com.au.

We are committed to handling your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our services, you consent to the collection and use of your information as described in this policy.

If you do not agree with this policy, please discontinue use of our services. If you are under the age of 18, please ensure a parent or guardian has reviewed and agreed to this policy on your behalf.

Who We Are

Class Mathematics is an Australian mathematics education platform operated by:

Legal entity	ClassCoach Pty Ltd
Trading name	Class Mathematics
ABN	63 630 539 758
Country	Australia
Contact email	hello@classmathematics.com.au

We provide curriculum-aligned mathematics resources to students, parents, teachers, tutors, and schools across Australia.

What Personal Information We Collect

The personal information we collect depends on how you interact with our platform. We only collect information that is reasonably necessary for our services.

Account & Registration Information

Information	Why we collect it
Full name	To personalise your account and communications
Email address	To create your account, send transactional emails, and communicate with you
State / territory	To show you curriculum-aligned content for your state's syllabus
Year level	To show you relevant questions and resources for your stage of study
User type (student, teacher, tutor, parent)	To tailor the platform experience to your role
Password (encrypted)	To secure access to your account

Payment Information

When you purchase a subscription or product, payment processing is handled securely by Stripe and Shopify Payments. We do not store your full card details on our systems. We may retain:

• Your name and billing address (as provided at checkout)
• The last four digits of your card and card type (stored by Stripe/Shopify for reference)
• Transaction history and subscription status

Session & Device Information

To protect your account from unauthorised access, prevent account sharing in breach of our Terms, and maintain the integrity of our subscription model, we collect information about each session in which your account is used. This includes:

• IP address from which you log in or access the platform
• Device fingerprint — a hashed identifier derived from technical characteristics of your device (such as browser type, operating system, screen resolution, and timezone)
• Device cookie — a unique identifier stored in your browser to recognise your device on return visits
• Browser and operating system information (user agent string)
• Login and session timestamps, including the time of login, last activity, and logout
• Approximate geographic location (city or region level), derived from IP address
• Session events, such as login attempts, forced logouts, and concurrent session conflicts

This information is treated as part of your personal information and is protected in the same way as the other categories described in this policy. See Section 6 — Account Security & Session Data for further detail on how this information is used.

Usage & Analytics Information

We collect information about how you use our platform to improve our services. This includes:

• Pages visited, features used, and time spent on the platform
• Device type, browser type, and operating system
• Approximate location (country/state level, derived from IP address)
• Referring website or search query that brought you to our site
• Heatmap and session recording data (via Hotjar) to understand how users interact with our pages

Communications

If you contact us directly — by email, through a contact form, or via a free quiz builder — we may retain the contents of that communication and your contact details in order to respond to you and keep a record of our correspondence.

How We Collect Your Information

We collect personal information in the following ways:

• Directly from you — when you create an account, make a purchase, complete a form, build a free quiz, or contact us
• Automatically — when you use our platform, through cookies, analytics tools (Google Analytics 4), session recording tools (Hotjar), and our session and device logging systems
• From third parties — when you make a purchase through our Shopify store, Shopify passes order and customer information to us in order to fulfil your order and manage your subscription

We do not collect sensitive information (such as health, racial or ethnic origin, political opinions, or biometric data) and we do not purchase or acquire personal information from data brokers or marketing lists.

How We Use Your Information

We use your personal information only for the purposes for which it was collected, or for directly related purposes you would reasonably expect. These include:

Purpose	Details
Providing the service	Creating and managing your account, delivering curriculum-aligned content, processing payments, and managing subscriptions
Personalisation	Showing you content relevant to your state, year level, and user type
Account security	Authenticating logins, detecting unauthorised access, enforcing single-session usage, and protecting your account from misuse
Terms enforcement	Identifying breaches of our Terms of Service, including unauthorised account sharing
Transactional communications	Sending account confirmations, password resets, purchase receipts, and subscription notifications
Marketing communications	Sending you educational resources, product updates, and relevant offers — only where you have opted in or where permitted under the Spam Act 2003
Platform improvement	Analysing usage data to understand how our platform is used and to improve the experience
Customer support	Responding to enquiries, resolving issues, and managing complaints
Legal obligations	Complying with applicable laws, regulations, and legal processes

Account Security & Session Data

Class Mathematics subscriptions are licensed to a single named individual. To protect your account, deter unauthorised access, and enforce this single-user requirement, we operate an automated session monitoring system. This section explains exactly what that involves.

What we record

Each time you (or anyone using your account credentials) logs in or interacts with the platform, we record a session entry containing the information described in Section 3 — Session & Device Information. This includes IP address, device fingerprint, device cookie, browser and operating system details, and timestamps of activity.

How we use this information

• Single-session enforcement — only one active session is permitted per account. When a new login occurs on a different device, the previous session is automatically ended. The previous device will see a notification explaining that the account has been signed in elsewhere.
• Detecting unauthorised access — unusual login patterns (such as logins from multiple geographic regions in a short time, or from a high number of distinct devices) may indicate that your account has been compromised or is being shared in breach of our Terms.
• Audit history — if there is a dispute about activity on your account, we can review the session log to determine when, where, and from what type of device the account was used. You may request your own session history by contacting us.
• Terms enforcement — where the session log indicates that an account is being shared in breach of our Terms of Service, we may contact the account holder, suspend the account, or terminate the subscription. See our Terms of Service for the relevant provisions.

What we do not do

• We do not use session or device data for advertising or marketing purposes
• We do not sell or share session or device data with third parties for their commercial purposes
• We do not track your activity on other websites or applications
• We do not use device fingerprinting to identify you outside the Class Mathematics platform

Disclosure to Third Parties

We do not sell your personal information. We share your information only with trusted service providers who help us operate our platform, and only to the extent necessary for them to perform their services.

Third Party	Purpose	Data Shared
Stripe	Payment processing for portal subscriptions	Name, email, billing address, payment details
Shopify	E-commerce store and payment processing	Name, email, billing/shipping address, order details
dotdigital	Email marketing and automated email sequences	Name, email address, user type, state, purchase history
Google Analytics 4	Website analytics and usage reporting	Anonymised usage data, device/browser information
Hotjar	Session recording and heatmap analysis	Anonymised interaction data (no personal identifiers)
Microsoft Azure	Hosting of the student/teacher portal and storage of session and device logs	Account data and session logs stored in Azure data centres

All third-party service providers are required to handle your information in accordance with applicable privacy laws. We do not authorise them to use your information for their own marketing purposes.

We may also disclose your information where required by law, court order, or government authority, or where we believe disclosure is necessary to protect the safety of any person or to prevent fraud or illegal activity.

Storage & Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:

• Encrypted storage of passwords (hashed and salted — never stored in plain text)
• HTTPS encryption across all our web properties
• Restricted internal access to personal data on a need-to-know basis
• Payment data handled exclusively by PCI-DSS compliant providers (Stripe and Shopify)
• Session and device data stored in secured databases on Microsoft Azure infrastructure, accessible only to authorised personnel for security and compliance purposes
• Regular review of our security practices and third-party integrations

Our portal is hosted on Microsoft Azure infrastructure. While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. If you become aware of any security vulnerability or breach, please contact us immediately at hello@classmathematics.com.au.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Data Type	Retention Period
Account information	For the duration of your account, plus up to 2 years after account closure
Purchase and transaction records	7 years (as required for financial record-keeping under Australian law)
Session and device logs	Up to 24 months from the date of the session, after which records are automatically deleted or de-identified
Marketing email engagement data	Until you unsubscribe or request deletion, whichever is sooner
Analytics data (GA4, Hotjar)	As per Google's and Hotjar's data retention settings (typically 14 months for GA4)
Customer support correspondence	Up to 3 years after the matter is resolved

When your data is no longer required, we will take reasonable steps to destroy or de-identify it securely.

Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you, including your session and device log
• Correct any personal information that is inaccurate, out of date, or incomplete
• Request deletion of your personal information, subject to our legal obligations to retain certain records
• Withdraw consent to marketing communications at any time
• Make a complaint about how we have handled your personal information

To exercise any of these rights, please contact us at hello@classmathematics.com.au. We will respond to all requests within a reasonable time — generally within 30 days. In some cases, we may ask you to verify your identity before processing your request.

If you are not satisfied with our response to a privacy complaint, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Cookies & Analytics

We use cookies and similar tracking technologies on our websites. Cookies are small text files stored on your device that help us provide and improve our services.

Types of cookies we use

Type	Purpose	Examples
Essential	Required for the platform to function — including keeping you logged in and processing transactions	Session cookies, authentication tokens
Security	Identify your device for the purposes of session enforcement and account protection	Device cookies, fingerprint identifiers
Analytics	Help us understand how visitors use our site so we can improve it	Google Analytics 4
Behaviour	Record how users interact with our pages to help us identify usability issues	Hotjar session recordings and heatmaps
Marketing	Help us understand which campaigns bring visitors to our site	Google Ads conversion tracking

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Please note that disabling essential or security cookies may affect the functionality of our platform — including your ability to remain logged in and to use the portal at all.

For more information about how Google uses data collected through our site, visit policies.google.com. For Hotjar's privacy practices, visit hotjar.com/legal/policies/privacy.

Children's Privacy

Our platform is designed for use by students, including those under the age of 18. We recognise the importance of protecting children's privacy and take additional care in this area.

Where a user is under 18, we expect that a parent or guardian has reviewed this privacy policy and consented to the collection and use of that student's personal information on their behalf — including the session and device data described in Section 6. We encourage parents and guardians to be involved in their child's use of our platform.

We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If you believe we have inadvertently collected information from a child under 13 without appropriate consent, please contact us at hello@classmathematics.com.au and we will take steps to delete that information promptly.

We do not display targeted advertising to users we know to be under 18, and we do not share student data with third parties for advertising purposes.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will update the "Last updated" date at the top of this page.

If we make material changes that significantly affect how we handle your personal information, we will notify registered users by email or by displaying a prominent notice on our platform before the changes take effect.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes your acceptance of the updated policy.