International Maarif Schools of Australia is committed to protecting personal information and handling it in accordance with applicable privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Purpose

This Policy explains how the School collects, holds, uses, discloses and protects personal information.

2. Who this Policy applies to

This Policy applies to personal information relating to students, parents and guardians, prospective families, staff, contractors, volunteers, alumni, donors, visitors and other individuals who interact with the School.

3. What information we collect

The School may collect personal information, including:

• identity and contact details
• enrolment, academic, attendance and wellbeing records
• health and medical information
• behavioural, pastoral care and child protection information
• financial and billing information
• employment, contractor and volunteer records
• photographs, video, audio and other media
• website, device and system usage

Where reasonably necessary, the School may also collect sensitive information, including health information and other information permitted by law.

Sensitive information, including health information, is collected and handled in accordance with applicable law and, where required, with consent or as otherwise permitted, including to fulfil duty of care obligations.

4. How we collect information

The School usually collects personal information directly from the individual or from a parent or guardian. We may also collect information from third parties where lawful and reasonably necessary, including previous schools, education authorities, medical practitioners, referees, service providers and publicly available sources.

5. Why we collect, use and disclose information

The School uses and discloses personal information for the primary purpose of collection and for related secondary purposes within reasonable expectations or as otherwise permitted by law.

The School collects, uses and discloses personal information for purposes connected with its functions and activities, including to:

• assess applications and manage enrolment
• provide education, wellbeing and pastoral care
• support student safety and meet duty of care obligations
• communicate with families and the school community
• administer employment and engagement of staff, contractors and volunteers
• manage billing, payments, insurance, risk and compliance
• meet legal, regulatory and reporting obligations
• investigate incidents, complaints and child protection matters
• operate school systems, technology and security
• conduct school improvement, planning, research and administration
• manage alumni, community relations, fundraising and lawful

If the School does not receive requested information, it may be unable to enrol a student, continue enrolment, employ or engage a person, or otherwise provide services.

6. Disclosure of personal information

The School may disclose personal information where reasonably necessary for the purposes above, including to:

• parents, guardians and authorised contacts
• teachers and other school staff
• government, regulatory and education authorities
• medical practitioners and allied health providers
• third-party service providers, including IT, learning, payment, wellbeing, transport, excursion, uniform, photography and communication providers
• professional advisers, insurers and auditors
• other schools or education providers
• related entities or affiliated schools within the Maarif network
• organisations assisting with fundraising, alumni or community engagement
• any other person or body where required or authorised by
• The School does not sell personal information.

7. Overseas disclosure

These recipients may include service providers located in countries such as Türkiye, the United States, United Kingdom or the European Union where applicable.

The School may disclose personal information to recipients outside Australia where reasonably necessary for school operations, educational programs, technology services, travel, exchanges or other school activities. Where it does so, the School will take reasonable steps to ensure the information is handled in accordance with applicable privacy law.

8. Storage and security

The School takes reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps may include access controls, secure systems, encryption, staff training, contractual safeguards and secure storage of paper and electronic records.

9. Data breaches

If an eligible data breach occurs, the School will respond in accordance with its legal obligations, including taking containment and assessment steps and giving any required notifications.

The School maintains procedures to assess, contain and respond to data breaches in accordance with the Notifiable Data Breaches scheme.

10.  Access and correction

Where lawful and practicable, individuals may interact with the School anonymously or using a pseudonym.

Individuals may request access to personal information the School holds about them and may request correction if it is inaccurate, out of date, incomplete, irrelevant or misleading. The School may decline a request where permitted by law.

Requests should be made in writing to the Privacy Officer.

11.  Direct marketing, publications and fundraising

The School may use contact details to send information about school events, activities, publications, alumni relations, community engagement and fundraising. Individuals may opt out of non-essential marketing communications.

From time to time, the School may use names, photographs, video, audio, student work or similar material in school communications, publications, promotional materials and digital platforms, in accordance with the School’s permissions and consent processes.

12.  Website and technology

When individuals use the School’s website, portals, apps or systems, the School or its service providers may collect technical information such as IP address, browser type, device information, usage data and cookies to support security, functionality, analytics and service improvement.

13.  Retention

The School retains personal information for as long as reasonably required for its functions and activities, or as required by law, and then securely destroys or de-identifies it where appropriate.

14.  Collection Notice

When collecting personal information, the School will take reasonable steps to inform individuals of its identity and contact details, the purpose of collection, the consequences of not providing the information, the types of disclosures (including overseas where applicable), how to access this Policy, and how to make a complaint. This information may be provided at the point of collection.

15.  Complaints

The School will investigate complaints, may request further information, and will provide a written response outlining the outcome and any steps taken.

A person who wishes to make a privacy complaint may contact the Privacy Officer. The School will review the complaint and respond within a reasonable time.

Privacy Officer

e-mail: privacy@maarif.nsw.edu.au phone: 1800 622 743

address: 2 Percy St Auburn NSW 2144

 

16.  Changes to this Policy

The School may amend this Policy from time to time. The current version will be published on the School’s website.