We aim to collect only the information we reasonably need, use reputable third-party providers where appropriate, and take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure.
1. About this policy
1.1This Privacy Policy explains how Rohan's Tutoring, trading as Rohan's GAMSAT, collects, holds, uses, discloses, and otherwise handles personal information.
1.2This policy applies to information collected through this website, our contact and enrolment forms, quiz funnel, checkout flow, email communications, student support processes, downloadable resources, and related business systems.
1.3We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where those laws apply.
1.4This policy does not override rights or obligations that apply under contract, consumer law, payment-provider terms, or any law that cannot lawfully be excluded.
2. What personal information we collect
2.1We may collect identity and contact details such as your name, email address, phone number, billing address, country, and any contact details you include in a message or form.
2.2We may collect study and service-related information such as your exam timeline, course interest, score range, quiz answers, tutoring needs, essay submissions, and any academic or preparation context you choose to provide.
2.3When you purchase a product or service, we may collect transaction and fulfilment information such as product selected, pricing, payment status, order reference, refund status, course-access status, essay-upload status, and communications relevant to delivering the service.
2.4We may collect technical and usage information such as IP address, browser type, device type, referring page, on-site events, session activity, and other analytics identifiers collected through cookies, pixels, tags, or similar technologies.
2.5We do not intentionally collect raw card numbers, card security codes, or other untokenised payment card data through our own servers when you pay through Stripe or PayPal.
2.6If you are under 18, you should only provide personal information or buy paid services with permission from a parent or legal guardian.
3. How we collect personal information
3.1We collect information directly from you when you fill out a form, complete the quiz, submit an enquiry, book a service, purchase a product, upload an essay, email us, or otherwise communicate with us.
3.2We collect some information automatically when you use this website, including through analytics and website functionality tools.
3.3We may also receive information from service providers we use to operate the business, including payment processors, email and form platforms, analytics providers, hosting platforms, fulfilment tools, and customer-support systems.
3.4If you provide information about another person, you are responsible for ensuring you have the right to do so.
4. How we use personal information
4.1We use personal information to respond to enquiries, provide products and services, process payments, deliver course access, administer tutoring, review essays, communicate about orders, and otherwise perform our contractual and operational obligations.
4.2We use personal information to improve the website, measure funnel performance, understand which offers and pages are working, diagnose issues, prevent fraud or misuse, and protect the security and integrity of our systems.
4.3We may use your information to send transactional and service-related messages, including receipts, account access instructions, course updates, fulfilment updates, support replies, and important changes relevant to a product or service you requested.
4.4Where you have opted in, where the law allows it, or where the communication is sufficiently related to the service you requested, we may send marketing or educational emails such as study tips, offer updates, and course recommendations. You can opt out of marketing communications at any time.
4.5We may de-identify or aggregate information for internal reporting, business planning, analytics, and service improvement.
5. Disclosure and third-party service providers
5.1We may disclose personal information to third-party service providers that help us run the business and deliver services. Depending on the context, these may include website hosting and deployment providers, payment processors, form handlers, email and newsletter platforms, analytics providers, file-sharing or fulfilment tools, scheduling tools, and video or media platforms.
5.2Examples of providers we may use include Vercel, Stripe, PayPal, Formspree, Kit (formerly ConvertKit), Google Analytics, PostHog, Google Drive, Tally, Vimeo, and similar providers we use from time to time.
5.3We may disclose personal information where reasonably necessary to investigate suspicious activity, enforce our terms, collect amounts owing, obtain professional advice, protect our legal rights, or comply with a legal obligation, lawful request, or court order.
5.4We do not sell personal information in the ordinary course of business.
6. Overseas disclosure and cross-border handling
6.1Some of the third-party providers we use may store or process information outside Australia, including in the United States, Europe, and other countries where those providers or their infrastructure operate.
6.2Because our service providers may operate globally, it is not always practical to list every country in which personal information may be processed. Where reasonably possible, we choose established providers with their own privacy, security, and compliance commitments.
6.3By interacting with our services, you acknowledge that some information may be disclosed to overseas recipients as part of the operation of those systems.
7. Payments, checkout, and security
7.1Online payments are processed through third-party payment providers such as Stripe and PayPal. Those providers may collect, store, and process payment information under their own privacy notices and security controls.
7.2We use payment methods designed to reduce our handling of sensitive card data. In the ordinary course of our checkout flow, raw card details are entered into provider-controlled payment components and do not pass through our own application servers in untokenised form.
7.3We may retain limited payment-related information such as payment status, product purchased, amount, timestamp, order ID, and provider reference IDs so we can fulfil purchases, provide support, handle disputes, and maintain business records.
7.4We take reasonable steps to protect personal information, including by using HTTPS, access controls, environment-based secret management, and provider tools designed to support secure payment and webhook handling. Even so, no method of transmission or storage is completely risk free, and we cannot guarantee absolute security.
7.5If we suspect unauthorised activity, fraud, abuse, or a data security issue, we may investigate, restrict access, contact affected individuals where appropriate, and take other reasonable response steps.
9. How long we keep personal information
9.1We keep personal information for as long as reasonably necessary for the purpose it was collected, including to deliver products or services, maintain records, provide support, meet legal or accounting obligations, resolve disputes, enforce agreements, and investigate issues.
9.2Retention periods may vary depending on the type of information, the product or service involved, and the systems used to store it.
9.3When we no longer reasonably need personal information, we may delete it, de-identify it, or leave it in secure backup or archival systems until normal deletion cycles apply, unless the law requires otherwise.
10. Access, correction, and marketing choices
10.1You can request access to personal information we hold about you, or ask us to correct information that is inaccurate, incomplete, out of date, irrelevant, or misleading.
10.2We may need to verify your identity before responding to an access or correction request. In some cases, the law may allow or require us to refuse access, limit access, or keep certain records.
10.3You can opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us directly. Service and transaction emails may still be sent where needed to provide a product or service you requested.
11. Privacy complaints
11.1If you believe your privacy has been affected or your personal information has been mishandled, contact us first with enough detail for us to investigate.
11.2We will review the issue, may request further information, and will respond within a reasonable time.
11.3If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.
12. Changes to this policy
12.1We may update this Privacy Policy from time to time to reflect changes to our services, providers, systems, legal obligations, or information-handling practices.
12.2The version published on this page is the current version. Changes take effect when published unless we state otherwise.
13. Contact
13.1If you have a privacy question, access request, correction request, or complaint, contact us at rohan@rohanstutoring.com.
13.2Rohan's Tutoring is based in Sydney, Australia.