Privacy Policy.
Plain-English version: we collect the minimum we need, we don't sell your data, and we delete it when you ask. The details are below.
What we collect
When you create an account: your name, email address and (optionally) your school or organisation. When you use the curriculum platform: anonymised usage data so we can improve the product. When you make a purchase: billing address and payment method processed by Stripe; we never see your card number. Advertising pixels (Meta and Google) load only if you accept cookies; see Cookies below.
How we use it
Your data is used to run your account, send you product updates you asked for, and improve the platform. We do not sell it to third parties. We do not use your account data for advertising. We don't share it with other schools or users. We use Mailchimp for newsletters, and you can unsubscribe at any time from any email.
Children's data
Our school platform may be used with students. Schools are responsible for obtaining appropriate parental consent under their local privacy laws. We only process student data on behalf of the school (as a data processor, not controller). We do not use student data for any purpose other than providing the service. Student accounts do not include social features or advertising.
Compliance
We comply with the Australian Privacy Act 1988, GDPR (for European users), FERPA (for US schools), and the New Zealand Privacy Act 2020. Our servers are hosted in Australia and the United States. Data transfers to the US are covered by standard contractual clauses.
Your rights
You can request a copy of your data, ask us to correct it, or ask us to delete it, at any time, for any reason. Email hello@theschoolofplay.co with the subject line "Data request". We will respond within 14 days. If you are in the EU or UK you also have the right to lodge a complaint with your local data protection authority.
Cookies
We use cookies and similar technologies for three purposes only: (1) session and authentication cookies, which keep you logged in and are strictly necessary to operate the platform; (2) preference cookies, which remember settings like your selected class or curriculum level; and (3) with your consent only, advertising pixels from Meta and Google, which we use to measure how our ads perform (for example, whether someone who clicked an ad went on to buy). If you choose "Essential only" in the cookie banner, those pixels never load. You can change your choice at any time with the "Cookie settings" link in the footer. Any page analytics we run are privacy-friendly and cookieless, with no personal data attached. You can also disable cookies in your browser settings, but doing so may prevent login and other core features from working.
Data retention
We keep your account data for as long as your account is active. If you cancel or request deletion, we remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance (e.g. billing records, which we keep for 7 years under Australian tax law). Anonymised, non-identifiable usage data may be retained indefinitely to improve the platform.
Third-party processors
We use a small number of trusted third-party services to operate the platform. Stripe processes all payments; we never store or see your card number. Vimeo hosts all curriculum and welcome videos; video plays may be logged by Vimeo under their own privacy policy; we use privacy-mode embeds (dnt=1) to minimise data collection. Mailchimp manages our newsletter list. Vercel hosts the platform and collects anonymised request logs. If you accept advertising cookies, Meta and Google receive ad-measurement data under their own privacy policies. Each of these providers is contractually bound to protect your data and may not use it for their own purposes.
Last updated: September 2026. Questions? hello@theschoolofplay.co