Privacy Policy

1. Our commitment

Edison AI Academy (ABN 45 331 765 330), operated by Edison Ngu (Edison AI Academy, we, us, our) is committed to protecting the privacy of the students, parents, guardians, faculty, schools and partners we work with.

This Privacy Policy explains how we collect, use, hold and disclose personal information. We choose to behave as if we are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) at all times — regardless of turnover threshold — because we work with children and with schools.

2. Scope

This Policy applies to personal information we collect through:

• our website (edisonacademy.com.au and edisonai.au), sub-sites and online learning platforms;
• application, admissions and enrolment forms;
• learning environments — in-person studio sessions and hybrid online components;
• school, district and business partnerships;
• marketing, events and community communications.

3. What personal information we collect

3.1 From parents, guardians and adult students

• name, contact details, billing address;
• relationship to the student;
• emergency contact details;
• payment information (processed via secure third-party providers; we do not store full card details);
• communication preferences and marketing consents.

3.2 From students

• name, preferred name, date of birth, age, school year, school name;
• emergency contact and medical, allergy, learning or accessibility information you choose to disclose for safety reasons;
• admissions information (interests, prior experience, learning goals);
• learning history, attendance, work submitted, assessment evidence, certificates and portfolio outputs;
• login identifiers for Edison AI Academy and partner learning tools.

3.3 From schools, districts and business partners

• contact details for staff and procurement representatives;
• information about the engagement, including objectives, dates, and student cohort details;
• payment and billing information.

3.4 Automatically collected information

• device, browser, IP address, location at country/region level;
• interactions with our website and learning platforms;
• cookies, similar technologies and analytics events.

3.5 Sensitive information

We avoid collecting sensitive information (as defined in the Privacy Act) wherever possible. Where it is necessary — for example, health information needed for safe participation, or cultural information needed for accessibility — we collect it only with consent and use it only for the purpose disclosed. Sensitive information is never entered into AI tools.

4. Information about children and minors

Many of our students are under 18. The Office of the Australian Information Commissioner (OAIC) makes clear that children's personal information is protected regardless of age. We:

• collect information about students under 18 primarily through their parent or legal guardian;
• only collect the minimum information needed for safe and effective delivery of Programs;
• apply heightened safeguards for any student we know is under 13, including not requiring direct sign-up to third-party AI tools where the provider's terms do not permit it;
• provide age-appropriate explanations of how we use information.

Parents and guardians may exercise privacy rights on behalf of a student who lacks the capacity to do so themselves.

5. How we collect information

• directly from you when you apply, enrol, contact us, attend a Program or sign up for our communications;
• from your child or student where they interact with our platforms or studio environments;
• from schools, districts or partners with whom you have a relationship;
• from third parties such as payment processors, identity verification providers (for staff) and analytics providers.

6. Why we collect and use personal information

We use personal information to:

• deliver, administer and improve our Programs and learning experiences;
• communicate with you about admissions, enrolments, scheduling, safety and learning outcomes;
• issue Edison AI Academy certificates and portfolio credentials;
• respond to enquiries and provide customer support;
• manage payments, refunds and financial records;
• maintain child safety, manage incidents and meet our duty of care;
• comply with legal, regulatory and reporting obligations;
• conduct internal research, evaluation and quality assurance, using de-identified data wherever possible;
• provide direct marketing about our Programs, where you have consented or where we may otherwise do so by law (with an easy unsubscribe option included in every commercial message).

7. Generative AI and learning tool use

Our Programs introduce students to generative AI and other learning tools. We apply the following safeguards:

• we choose AI tools whose published terms are appropriate for our use case and, where possible, do not train on user inputs;
• we instruct students and faculty not to enter personal, sensitive, third-party or confidential information into AI tools beyond what is required for an exercise, and to use placeholder data where appropriate;
• where AI tools require account creation, we follow the provider's minimum age requirements and apply parent or guardian consent procedures;
• we keep an internal AI Tool Register listing every approved tool, account model, and data handling posture;
• our practices are designed to align with Australia's Voluntary AI Safety Standard.

8. Disclosure of personal information

We disclose personal information to:

• faculty and contractors who need it to deliver Programs;
• schools, districts or business partners where you are enrolled through them, in line with the agreed engagement;
• service providers we use to run our business — for example, Google Workspace (email, files, video conferencing via Zoom or Google Meet), Notion (internal knowledge), payment processors, accounting providers, marketing platforms;
• government, regulatory and law enforcement bodies where required or permitted by law (for example, mandatory child safety reporting);
• professional advisers such as lawyers, auditors and insurers, on a confidential basis;
• any acquirer of our business or assets in the context of a corporate transaction, under confidentiality.

We require our service providers to handle personal information consistently with this Policy and applicable privacy laws.

9. Overseas disclosure

Some of our service providers (including Google Workspace, Notion, generative AI providers, and cloud hosting) operate or store data outside Australia, including in the United States, the European Union and other regions. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.

10. Data security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These steps include access controls, multi-factor authentication, encryption in transit, secure passwords, regular reviews of vendor security, and faculty training.

No system is completely secure. If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme.

11. How long we keep personal information

We retain personal information only for as long as is reasonably necessary for the purposes set out in this Policy, or as required by law (for example, tax, financial and child safety record-keeping obligations). When information is no longer needed, we securely destroy or de-identify it. The full schedule is set out in our Data Retention & Deletion Policy.

12. Direct marketing

With your consent, or where otherwise permitted by law, we may send you marketing communications about Edison AI Academy programs, cohorts, events and resources. Every commercial electronic message we send includes a clear unsubscribe option, in line with the Spam Act 2003 (Cth) and the Privacy Act. To opt out of marketing at any time, click the unsubscribe link in any email or contact contact@edisonacademy.com.au.

13. Cookies and analytics

Our website uses cookies, pixels and similar technologies to make the site work, remember preferences, measure performance and personalise content. We may use analytics services such as Google Analytics, Meta and similar providers, configured to respect privacy where reasonable. You can disable cookies in your browser settings.

14. Your privacy rights

Subject to applicable law, you may:

• request access to the personal information we hold about you or a child you are responsible for;
• request correction of inaccurate or out-of-date information;
• withdraw a consent you have previously given (for example, for media use or marketing);
• ask us to delete personal information, subject to legal and operational retention requirements;
• complain about how we have handled personal information.

To exercise these rights, contact contact@edisonacademy.com.au. We may need to verify your identity before responding.

15. Complaints

If you have a privacy complaint, please contact us first at contact@edisonacademy.com.au. We will respond within a reasonable time, normally within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

16. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or the law. The current version is always available on our website with a revised "Last updated" date.

17. Contact us

Edison AI Academy is operated by Edison Ngu (ABN 45 331 765 330), trading under the registered business name 'Edison Academy Australia'.

Address: 204 Victoria Street, Potts Point NSW 2011

Phone: +61 468 518 983

Privacy and child safety: contact@edisonacademy.com.au

General enquiries: helloworld@edisonacademy.com.au

Last reviewed: 25 May 2026 | Next review: 25 May 2027

Contact

General enquiries: education@edisonacademy.com.au