Privacy Policy

Last Updated: September 2026

1. Commitment to Privacy

EduProcure is committed to protecting the privacy of our users. This Privacy Policy outlines how we collect, hold, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Kinds of Information We Collect

We collect information strictly necessary to facilitate school procurement workflows between educational institutions and commercial suppliers:

  • School Representatives: Name, school email address (e.g., @education.vic.gov.au), school name/campus, phone number, and procurement project details.
  • Suppliers & Contractors: Contact person name, business name, Australian Business Number (ABN), business address, email, telephone number, trade categories, and submitted quote information.
  • Technical Information: IP address, browser type, operating system, and platform usage analytics collected via cookies and log files.

Strict Child & Student Data Prohibition: EduProcure does not collect, solicit, or store personal information relating to students, children, or minors. Users are strictly instructed not to include student or child details in any procurement briefs or uploads.

3. How We Collect Personal Information

We collect personal information directly when you:

  • Register for an account or authenticate via school credentials;
  • Post a project brief, RFQ, or procurement requirement;
  • Submit a quote, bid, or expression of interest;
  • Contact our support or advisory team via email or web form.

4. Purpose of Collection, Use, and Disclosure

We collect, hold, use, and disclose personal information solely for the following purposes:

  • Verifying school representative credentials and supplier business legitimacy;
  • Enabling Schools and Suppliers to communicate, exchange specifications, and issue quotes;
  • Providing platform notifications, project updates, and customer support;
  • Monitoring platform integrity, detecting fraud, and enforcing our Terms of Service;
  • Complying with our legal and regulatory obligations.

We will not sell, rent, or trade your personal information to third parties for third-party marketing purposes.

5. Cross-Border Disclosure of Data (APP 8)

5.1 Overseas Cloud Infrastructure: To operate our modern web infrastructure efficiently, securely, and reliably, EduProcure utilizes cloud hosting, database, and infrastructure providers located outside Australia.

5.2 Countries of Processing: By using the Platform, you acknowledge that your personal information will be stored and processed in data centers located in:

  • The United States of America (US) (primary cloud hosting and compute infrastructure);
  • Japan, Singapore, and Australia (ancillary routing, content delivery networks, and distributed service nodes).

5.3 Protection Measures: Before disclosing personal information offshore, we take reasonable steps to ensure that third-party cloud providers adhere to robust security standards, contractual data protection terms, and principles comparable to the Australian Privacy Principles.

6. Data Security and Retention

6.1 Security Standards: We implement reasonable technical and organizational security measures to protect your information from misuse, interference, loss, unauthorized access, modification, or disclosure. This includes transport-layer encryption (HTTPS/TLS) and restricted administrative access.

6.2 Retention: We retain personal information only for as long as necessary to fulfill the operational purposes described in this policy, or as required by statutory accounting, audit, and legal retention obligations.

7. Access and Correction (APP 12 & APP 13)

Under the APPs, you have the right to request access to the personal information we hold about you and request corrections if you believe it is inaccurate, out of date, incomplete, or misleading. To make a request, contact our Privacy Officer at the details below. We will respond within a reasonable timeframe (typically 30 days).

8. Complaints and Contact Information

If you have any questions, concerns, or complaints regarding our handling of your personal information or compliance with the Australian Privacy Principles, please contact us at:

If you are unsatisfied with our response to your complaint, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.