Privacy policy: the full version.

1. About this policy

Hoverpoint.io Pty Ltd (ABN 87 703 233 667) (“Hoverpoint”, “we”, “us” or “our”) publishes Kestrel and runs this website, kestrel.hoverpoint.io. This policy explains how we collect, use, hold and disclose personal information through this website, and in the messages you send us from it or about it.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What this policy does not cover. It does not cover Kestrel, the application at app.kestrel.hoverpoint.io, or the records a school keeps in it. Those are handled under each school’s licence agreement with Hoverpoint. Our company website, hoverpoint.io, has its own privacy policy.

This website is written for the people who work in schools. It does not ask for information from or about a child.

2. The information we collect

We collect only the personal information we need. You can read every page of this website without telling us who you are. Depending on what you ask of us, we may collect:

• your name, email address and phone number
• your school, your role, and your state or territory
• what you tell us about your school and the systems it uses
• the content of messages and questions you send us
• how much of the walkthrough film you have watched
• technical information when you visit, such as your IP address, browser, the page you asked for, the page that linked to it and the time.

We do not ask for sensitive information, such as health information, through this website. Please don’t include it in a message. If we ever need it, we will ask for your consent first.

3. How we collect it

We collect personal information directly from you, when you complete a form on this website, sign up to the newsletter or email us. The web server records its details when your browser asks for a page.

While you answer the Health Check, your progress is kept only in your own browser, so you can come back to it. It reaches us only when you ask for your report.

We do not buy contact lists, and we do not add details from other sources to what you send us through this website.

You can deal with us anonymously or under a pseudonym where that is practical.

4. Cookies, analytics and this website

This website sets one cookie, and only when you ask to watch the walkthrough film. It holds your link to the film for 30 days and is used for nothing else.

This website runs no analytics, advertising, tracking pixels or third-party scripts. Its fonts, images and films are served from this website, and the content policy your browser enforces blocks every other origin, so nothing on a page can send what you type anywhere else.

If we add analytics or another cookie in future, we will update this policy first.

5. How we use personal information

We use personal information to:

• respond to your enquiries and give you what you ask for, such as a walkthrough, the walkthrough film or a Health Check report
• follow up with you on what you asked for
• send you updates you have subscribed to
• keep this website running and secure
• meet our legal obligations.

We do not sell, rent or trade personal information, and we do not use it to make automated decisions that significantly affect you.

6. Direct marketing

We send marketing messages only where you have agreed to receive them or where the law otherwise allows it. Each message tells you how to unsubscribe, and you can also ask us to stop at any time by writing to privacy@hoverpoint.io.

7. Who we share it with

We share personal information only where we need to. These service providers handle what this website collects:

• Amazon Web Services, Australia
• Proton, Switzerland
• Google, United States and other countries
• AgentMail, United States.

We require them to keep personal information confidential and to use it only to provide their services to us. We may also share personal information with our professional advisers, with anyone you ask us to share it with, and with government agencies or others where the law requires or allows it.

8. Overseas disclosure

Three of the providers in section 7 store or process information outside Australia: in Switzerland, and in the United States and other countries. Before we share personal information with an overseas recipient, we take reasonable steps to make sure the recipient handles it in a way that is consistent with the Australian Privacy Principles.

9. How we protect it

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. In particular:

• every connection to this website is encrypted with TLS 1.3, and browsers are told to use nothing less secure
• on our servers, what you send through this website is stored encrypted, in Australia
• only the people on our team who answer your request can read it.

No method of sending information over the internet is completely secure. If a data breach is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

10. How long we keep it

We keep personal information only for as long as we need it for the purpose we collected it for, or as the law requires, and then we delete it or remove anything that identifies you.

11. Access, correction and deletion

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@hoverpoint.io. None of these costs anything.

We acknowledge your request within 5 business days and answer it within 30 days. Before we send anything, we confirm that the request comes from the person it is about, usually by replying to the address we hold. If we refuse a request, we tell you why in writing and explain how you can complain.

12. Complaints

If you think we have mishandled your personal information, write to privacy@hoverpoint.io and say that you are making a privacy complaint. We acknowledge it within 5 business days, and answer it in writing within 30 days with what we found and what we did about it.

You can take a complaint to the Office of the Australian Information Commissioner at any point, at oaic.gov.au or on 1300 363 992.

13. Changes to this policy

We may update this policy from time to time. The version and date at the top tell you which edition you are reading. If a change affects how we use details you have already given us, we email you before it takes effect.

14. Contact us

Privacy Officer
Hoverpoint.io Pty Ltd
ABN 87 703 233 667
privacy@hoverpoint.io

To report a security vulnerability, write to security@hoverpoint.io.