Introduction
This is the Privacy Statement for the web site EdSmart.com, and the Services provided via the EdSmart.com web site. By accessing the EdSmart.com web site and services, you are agreeing that your usage is subject to this Statement.
Australian Privacy Law
Cloud Paper Group Pty Ltd (trading as EdSmart) is an Australian company. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we participate in the Notifiable Data Breaches scheme administered by the Office of the Australian Information Commissioner (OAIC).
Collection of Personal Information
If you simply visit our web site, we do not capture any personal information from you.
We may collect information about your visit, including the pages you view, the links you click and other actions taken in connection with the EdSmart sites and services. We also collect certain standard information that your browser sends to every website you visit, such as your IP address, browser type and language, access times and referring Web site addresses.
When you receive newsletters or promotional e-mail from EdSmart, we may use customised links or similar technologies to determine whether the e-mail has been opened and which links you click in order to provide you more focused e-mail communications or other information.
If you are a subscriber to the EdSmart Service, we maintain at a minimum the following information:
1. Your Name
2. Password
3. Email Address
4. Country/Location/Time Zone
We also sometimes will store copies of correspondence between you and us in your subscription and Member record, or elsewhere, to assist us with providing a high level of customer service.
This is the minimum amount of information necessary to properly conduct our subscription systems. We may store other information that you have provided to us in the course of the provision of the EdSmart Service.
Where Your Data Is Stored
All EdSmart customer data, including information about schools, staff, parents and students, is stored at rest in Microsoft Azure data centres located in Australia.
A small number of service functions serve customers outsied of Australia, such as international SMS and transactional email delivery, and involve limited data being processed by providers outside Australia. These providers are listed on our GDPR & Data Processing page.
Children's and Student Information
EdSmart provides services to schools. Information about students and their families is collected and controlled by the school, and EdSmart processes it on the school's behalf and on its instructions. We do not use student or parent information for marketing, advertising or profiling, and we do not sell personal information. Parents with questions about how their child's information is handled should contact their school in the first instance, as the school controls what information is collected and how it is used.
Cookies
Cookies are small pieces of information stored by web sites on your computer. Very many sites use them, for a range of purposes. If you have configured your web browser not to warn about cookies, you probably have quite a few already stored on your hard drive. You must have cookies enabled in your browser in order to use this web site – we use the cookie to track whether you are logged in, and to store your log in details, and these are used to enhance your experience of the site, including making possible the ‘Remember Me’ function.
Sharing of Your Personal Information
Except as described in this statement, we will not disclose your personal information outside of EdSmart and its controlled subsidiaries and affiliates without your consent.
Members of the Service can permit some of their personal information to be shared with other Members via their Personal Profiles.
EdSmart may hire other companies to provide limited services on our behalf, such as handling the processing and delivery of mailings, providing customer support, hosting websites, processing transactions, or performing statistical analysis of our services. Those companies will be permitted to obtain only the personal information they need to deliver the service. They are required to maintain the confidentiality of the information and are prohibited from using it for any other purpose.
We may access and/or disclose your personal information if we believe such action is necessary to: (a) comply with the law or legal process served on EdSmart; (b) protect and defend the rights or property of EdSmart (including the enforcement of our agreements); or (c) act in urgent circumstances to protect the personal safety of Members of EdSmart services or members of the public.
Accessing Your Personal Information
We give you the right to access the information we maintain about you, and to change it if necessary. You are able to access the key information simply by logging into the web site and Service, and can change most items yourself.
If you wish to see the entirety of the information in your member record, please contact us and we will arrange a copy. If you wish to update or correct any part of the information, please advise us and we will make the changes as quickly as possible.
Security of Your Personal Information
EdSmart is committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information from unauthorised access, use, or disclosure. For example, we store the personal information you provide on computer systems with limited access, which are located in controlled facilities. We protect the transmission of confidential information through the use of encryption, such as the Secure Socket Layer (SSL) protocol.
It is your responsibility to keep your Account credentials (passwords are stored as salted cryptographic hashes, never in plain text) confidential. Do not share this information with anyone. If you are sharing a computer with anyone you should always choose to log out before leaving the Service to protect access to your information from subsequent Members.
European Union
For customers in the UK and EEA, EdSmart processes personal data in accordance with the UK GDPR and EU GDPR. Details of processing locations and Sub-Processors are on our GDPR & Data Processing page.
Data Retention and Destruction
We retain personal information only for as long as needed to provide the Services and to support our school customers in meeting their legal obligations.
While a school remains a customer, records held in EdSmart form part of the school's records and are retained on the school's behalf. A student leaving a school does not of itself require or permit deletion of records the school is legally required to keep.
When a school's subscription ends, the school may request a full export of its data. Customer data is then deleted from our production systems. Encrypted backup copies expire in accordance with our documented backup retention schedule and are not used for any purpose other than disaster recovery.
Schools may request deletion of specific records in line with their own retention obligations. Individuals seeking deletion of their personal information should contact their school, which controls the data, and we will action the school's instruction.
Personal Information for Marketing Purposes
On occasion, EdSmart conducts marketing campaigns involving email, direct mail letters and other marketing tools, using mailing list databases. If we send you a letter or otherwise contact you, and you decide you do not wish to receive further communication from us, we will remove you from the marketing database.
Mandatory Communications
We may use your personal information to send certain mandatory service communications such as welcome letters, billing reminders, information on technical service issues, and security announcements.
Updates
We may update this Privacy Statement from time to time. This Statement was last updated on 16 June 2026.
Contacting EdSmart
If you have any questions about this Privacy Statement, the Service or your dealings with EdSmart, please contact us.