Privacy policy
Last updated 2 November 2026
TeachEd Pty Ltd ("we", "us") publishes interactive digital textbooks for Australian schools and runs workshops for teachers. This policy explains how we handle personal information, including the information of students who use our textbooks. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Who we are
TeachEd Pty Ltd (ABN 93 703 264 037) is an Australian education company owned and run by experienced teachers and HSC markers. We know what schools and students need to succeed, and we design every resource around it.
Our Privacy Officer looks after privacy questions, requests and complaints. You can contact them at admin@teached.com.au.
What we collect
School enquiries. When school staff ask for a quote, we collect their name, role, school email address, phone number (optional), school name, suburb and postcode, state or territory, school sector, preferred start, the textbooks they are interested in, the estimated number of students, whether a quote is needed before a purchase order, how they heard about us and any message they write. The form asks staff not to include student names or details.
Textbook accounts. Every account, free or paid, needs only an email address, which we verify by email, and a password. We do not ask for a name. We store the password only as a secure one-way hash. If you turn on two-step sign-in, we also keep the key your authenticator app uses, encrypted, and one-way hashes of your recovery codes, until you turn it off or the account is deleted. We also store whether the account is free or paid, when it last signed in and, for a place arranged by a school, the school's name. Your reading settings (colour theme, typeface, text size and spacing) and your answers in the textbook are saved in your browser on your device, not with your account. If someone else signs in to the textbook in the same browser, your answers are put away on the device, out of their sight, and come back when you sign in again. We do not ask for date of birth, school ID or home address, and teachers do not see individual students' progress. Nobody using the textbook can see or find other people's accounts.
Free Chapter 1 accounts. Anyone aged 15 or over can create a free account to read Chapter 1 of TeachEd Economics: Year 11. To create one we collect:
- an email address, which we verify by sending a confirmation link
- a password, which we store only as a secure one-way hash
- whether you are a student, a teacher, or a parent or carer
- the name of your school, if you choose to give it
- your confirmation that you are 15 or older, or that a parent or carer is creating the account.
We do not collect your name, date of birth, home address or phone number. We use these details to verify your email address, run your account and open Chapter 1. We look at role and school answers only in summary, to understand who is using the free chapter. We email free accounts only about the account itself: the verification link, password resets and changes to access. We keep a free account until you ask us to delete it, which you can do at any time by emailing admin@teached.com.au.
School orders. To give students their places, the school emails us the address of each student to be invited. We enter the list into our system, which emails each student a link to create their account, and keeps a record of who was invited and when. We delete the school's email with the list within 30 days of sending the invitations.
Payments. The website does not take payments. To buy an individual subscription you email us, and we reply with how to pay. We keep a record of each payment, its receipt and its tax invoice.
If you do not give us these details. We need the required details to reply to an enquiry, prepare a quote or create an account. Without them we cannot do those things.
Technical information. Our hosting provider records technical data, such as IP addresses and browser type, in server logs for security and troubleshooting. To protect the enquiry form and the sign-in and account forms from automated abuse we use Cloudflare Turnstile, which processes technical signals from your browser. To limit repeated attempts we keep a one-way hash of the IP address that sends an enquiry or uses the sign-in, free account or password reset forms, and delete it after a day. For security we also keep a record of sign-ins, failed and repeated attempts, new passwords and sign-outs for 90 days: what happened, when, which account (as an internal number) and that one-way hash of the IP address, but never an email address or password. Only TeachEd's admins can see it, and it is kept for its 90 days even if the account is deleted. We do not use advertising or tracking cookies, and we do not use website analytics.
How we use it
- to reply to enquiries and prepare quotes
- to set up and run accounts, give each account the chapters it has access to, and keep each account to one signed-in session
- to process payments, issue receipts and tax invoices, and invoice schools
- to provide support and tell account holders about changes to their access
- to keep our services secure and prevent misuse
- to meet our legal obligations, such as keeping tax records
We do not sell personal information, and we do not use students' information for marketing.
Who we share it with
We use service providers to run the website and the textbook. They handle personal information on our behalf and only for that purpose.
| Provider | What they do | What they receive | Where the data is held |
|---|---|---|---|
| Supabase | Database for enquiries and accounts | Enquiry details; account email addresses, password hashes, school, role, plan and sign-in times; the record of account actions; the 90-day record of sign-ins | Sydney, Australia |
| Vercel | Website hosting | Everything sent to the website, while it is handled; technical data (such as IP addresses and browser type) in its logs | Sydney, Australia for the website's server functions; its logs and global delivery network may process technical data overseas, including in the United States |
| Zoho | Sends the website's emails: enquiry emails, acknowledgements, invitations and account links | The recipient's email address and the email's content | Australia (Zoho's Australian data centre) |
| Microsoft | TeachEd's own email (Microsoft 365) | Enquiry emails, and the lists of student email addresses that schools send us | Australia |
| Cloudflare | Turnstile protection on the enquiry, sign-in and account forms | Technical signals from your browser, including its IP address | Cloudflare's global network, including the United States |
We may also disclose personal information when the law requires it.
Overseas disclosure
Enquiry records and student account data are stored in Australia. Some of the providers listed above may process limited information overseas, mainly in the United States: for example email addresses while an email is delivered, or technical data. We choose providers with strong security and privacy commitments.
Security and how long we keep information
Information is encrypted in transit and at rest, access is limited to the TeachEd staff who need it, all of whom work in Australia, and our service accounts are protected with multi-factor authentication. Everyone who uses TeachEd's admin portal signs in with a password and a code from an authenticator app, and readers can turn on the same two-step sign-in from Your account. When you choose a password, we check that it has not appeared in a known data breach, using Have I Been Pwned's list: only the first five characters of a one-way hash of the password are sent, never the password itself. We keep enquiries for two years, and account information until the account is deleted: by you from Your account, by us on request, or automatically once nobody has signed in to it for two years and any paid access has ended. Our record of account actions (such as when a student was invited, an account was created or deleted, or how many inactive accounts were deleted, without their addresses) is kept for two years, for support and record keeping. Payment and tax records are kept for as long as the law requires.
If something goes wrong. If a data breach is likely to cause serious harm, we will tell the people and schools affected as soon as possible, including what happened and what information was involved, and notify the Office of the Australian Information Commissioner where the law requires it.
Where your data is kept. We will tell schools before we move where their students' data is stored to another country, or give anyone outside Australia access to it.
Students
Most people who use our textbooks are senior secondary students. We collect only what is needed to run their account. A school that orders places for its students is responsible for telling students and families that it is sharing student email addresses with us for this purpose.
A student aged 15 or over can create a free account themselves, and we collect only what is needed to run it. We never use a student's information for marketing. A student under 15 needs a parent or carer to create the account for them. A parent or carer can ask to see, correct or delete a child's account by emailing admin@teached.com.au, and we will confirm the request is genuine before acting on it.
Access, correction and deletion
You can delete your account yourself, signed in, from Your account in Chapter 1's header: it is removed from our database straight away. You can also ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account, by emailing admin@teached.com.au. We will reply within 30 days.
Complaints
If you are concerned about how we have handled your personal information, email admin@teached.com.au and we will respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.
Changes to this policy
We review this policy at least once a year. If our practices change we will update this page and the date at the top, and if a change is significant we will email account holders and schools before it takes effect.