MusicEDU’s privacy procedures are in line with the Australian Privacy Principles (APPs) as set out in the Privacy Act 1988 (Cth) (Privacy Act).
We collect and store a range of personal data, both directly (for example, when providing it to us via a website or at a conference) and indirectly (that is, records on how you interacted with our website, for example when you clicked a button).
We don’t use data for any purpose other than to provide you with the MusicEDU service, or to provide you with pertinent updates.
We take all reasonable steps to ensure the security and integrity of your Personal Information.
We don’t access Personal Information we store on your behalf without your consent.
In the unlikely event of a data breach that could result in harm, we will notify you and the Australian Information Commissioner (Commissioner).
What information we collect
MusicEDU collects several types of personal information about people who interact with us, both offline and online. Under the Privacy Act, personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not, and whether recorded in a material form or not (Personal Information).
If you write to us via email or one of our contact forms, for example when asking for assistance or making a sales enquiry, we’ll keep a record of that correspondence for future reference. The same applies to surveys, website forms or competition entry forms.
Interacting with MusicEDU
Upon account activation, we request that you provide your school name as well as your email address, full name and password. We usually request the contact details of a number of staff at your school, such as of your accounts department and I.T. support staff. We ask for this information so that we can personalize your account, provide better assistance for your usage of MusicEDU, and communicate important updates.
Anonymous student accounts
MusicEDU does not require students real names to operate, though we believe it provides a better user experience for teachers! You have the option of entering pseudonyms for your students instead of their real names if you wish. Some customers provide their students with aliased numeric or random email addresses for use with online services, avoiding the need to store identifying information about them.
Indirect collection of information
Aside from the information you directly provide, we may also collect Personal Information about how teachers and students interact with us, which we refer to as ‘metadata’. For example, we collect and store information about when you click certain buttons or how far you scroll on a page – something that is increasingly common with modern websites.
Collection of metadata is undertaken for two reasons:
To learn more about how our users interact with MusicEDU, as part of our continued efforts to improve user experience.
To calculate interesting information about learners, such as the time taken to complete a particular question within an activity.
Links to external websites
In some circumstances, we may receive Personal Information that we have not requested. If this occurs, we will comply with our obligations under the Privacy Act. You acknowledge that we may de-identify and/or destroy this information unless we are required to keep it by law.
Use and disclosure of your personal information
Your privacy is of utmost importance to us and we are extensive in our procedures to ensure that your data is kept safe and secure.
The Personal Information you provide us is yours. We don’t claim any ownership of it whatsoever. We do not use this Personal Information for any purpose other than to provide you with the MusicEDU service, which may include the following:
to provide you with information, products or services you have requested;
to provide you with an account, including evaluating and processing your application for an account, assessing or approving an application for credit or assessing your creditworthiness;
to manage your account or credit account (if applicable), including orders and payments, collecting overdue amounts, and managing fraud and risks;
to promote and market our products and services to you, including to communicate with you via SMS or email newsletters;
to personalize and customize your experiences on MusicEDU;
to help us research the needs of our customers;
to conduct research for the purposes of improving existing products or services or creating new products or services;
to provide you with ongoing information about us and our activities;
to allow us to provide third party information and offers in which we believe you may be interested;
to use aggregated or de-identified information for the purposes of data analysis, research and reporting;
to comply with regulatory or other legal requirements;
for purposes related to the recruitment and employment of our personnel and providing internal services to our staff; and
for any other use required or permitted by law or any other purpose communicated to you at the time that the Personal Information was collected or for which you provided your consent.
We may use your Personal Information for a secondary purpose if that secondary purpose is related to the purposes listed above, if we have your consent or if otherwise provided for under the Privacy Act.
Access to data within a school
We provide extensive controls to allow schools to manage who can access the information stored on behalf of that school. Such information includes instructions, questions, student work, student results, comments teachers have entered about students, and so on. Accordingly, your Personal Information may be accessible to other users at your school.
Access to data between schools
MusicEDU is designed to keep each school’s data completely isolated. We do not disclose school-specific data (such as content, student work, student results etc.) across schools even if, as a MusicEDU user, you are a member of more than one.
MusicEDU may use your Personal Information to provide you with direct marketing materials if you would reasonably expect us to or if you consent to receive direct marketing materials. We will seek your consent to provide you with direct marketing materials if we have obtained your Personal Information from a third party. Direct marketing material may include promotional material about us or important updates about our services. We try and keep these to a minimum, while still providing you with the information you need or would probably want to know. We always give you the ability to unsubscribe from product update emails.
We never send email marketing to student email addresses.
We may also share non-personal, de-identified and aggregated information for research or promotional purposes in connection with providing requested information or services to you, or for the purpose of improving our services. We will not sell your Personal Information to third parties for marketing purposes.
Legal disclosure of your data
We won’t provide law enforcement authorities with access to your Personal Information unless required by law, is otherwise permitted by the Privacy Act, or is with your consent. We’ll always let you know if an authority does make such a request, unless we’re legally prevented from doing so.
Storage of information
Your data is securely stored within Australia.
MusicEDU is securely hosted in the Netvirtue facility in Sydney, Australia. This is a state-of-the-art datacentre that has been independently accredited as compliant with the Australian Government’s criteria for information security. As you would expect, the physical security of servers and other infrastructure is tightly controlled according to industry best practice.
In addition to a strong security focus, this datacentre has also been designed to be resilient to failure, featuring multiple separate power supply systems, independent network links and a range of other measures to ensure servers are always available.
MusicEDU may disclose Personal Information outside of Australia including entities in which we have an ownership interest or to third party service providers (Overseas Entities). The countries in which these Overseas Entities are located include the United States of America.
It is possible that the Overseas Entities may be subject to foreign laws that do not provide the same level of protection of information as in Australia. We take reasonable steps to ensure that the Overseas Entities do not breach the APPs and that they are obliged to protect the privacy and security of your Personal Information and use it only for the purpose for which it is disclosed.
MusicEDU employs industry best practice to secure your data and prevent access by unauthorised parties. For example:
All network communication between MusicEDU and your web browser is encrypted.
Passwords are only stored in an encrypted form.
Only specific MusicEDU staff members are able to gain access to the data we store on your behalf, and all such access is automatically logged. These security logs are regularly audited to ensure the customer provided explicit permission for this access to occur.
We log all actions performed on MusicEDU by user and IP address allowing us to track down unauthorised access for as long as our logs are kept.
Part IIIC of the Privacy Act established the Notifiable Data Breaches Scheme (NDB scheme) in Australia. The NDB scheme sets out obligations for notifying affected individuals and the Commissioner about a data breach which is likely to result in serious harm.
Where serious harm to affected individuals is possible, we will notify those individuals and the Commissioner in accordance with our legal obligations. You may contact our Privacy Officer (details set out below) should you require additional information.
Deleting Personal Information from MusicEDU
We will keep your Personal Information only for as long as required for our business purposes and otherwise as required by Australian law. Where we no longer need to keep your Personal Information, we will take reasonable steps to destroy or de-identify your Personal Information.
You may request the deletion of your Personal Information from MusicEDU upon account closure. Personal Information will be destroyed or de-identified from our live systems as soon as practical, though may persist for a reasonable period of time in backups. Note that this Personal Information removal includes all Personal Information you or your teachers and students have uploaded or provided to MusicEDU that we’ve managed on your behalf, but not our account-keeping records on you, which we’ll keep for future reference.
Updating and correcting your Personal Information
We will take reasonable steps to ensure that the Personal Information that we hold is accurate, up-to-date and complete. You can update your Personal Information at any time by contacting us. We welcome any changes to your Personal Information so as to keep our records up to date.
Requesting your Personal Information
You are entitled to access Personal Information that we hold about you. If you request access to your Personal Information, we will grant your request unless providing you with access would unreasonably impact upon the privacy of others or is not otherwise permitted under the APPs or at law. If we refuse your request to access your Personal Information, we will provide you with written reasons for the refusal.
A request for access can be made to email@example.com
How you can contact us, find out more information or make a complaint
We’ll be in touch as soon as practical to address your concerns.
MusicEDU.com.au is a product of MusicEDU Pty Ltd.
MusicEDU Pty. Ltd.
ACN 150 741 076
1-15 Tramore Place
Killarney Heights, NSW 208
You can find out more information about the Privacy Act and the APPs from the Office of the Australian Information Commissioner. The Information Commissioner may be contacted at www.oaic.gov.au or by email at firstname.lastname@example.org