Privacy Policy
Last updated: March 2026
1. Introduction
OurNewsletter is a product of Bolsta Education ABN 56 672 823 773 ("Bolsta", "we", "us", "our"). We are committed to protecting the privacy of the schools, families, staff members, and students who use our platform.
This Privacy Policy outlines how we collect, use, disclose, and safeguard personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). We may update this policy from time to time and will notify users of material changes.
2. What personal information do we collect?
The types of personal information we may collect include:
- Contact and identification details of school staff who use the platform (name, email address, role)
- Email addresses of family members who verify their identity to view protected newsletter content
- Newsletter content submitted by school staff, which may include student names, class information, and photographs as determined by the school
- Usage data and analytics relating to how the platform and published newsletters are accessed
- Device and browser information collected through cookies and similar technologies
- Communication records between users and OurNewsletter support
- Billing and payment information for subscribing schools
3. How do we collect personal information?
We collect personal information through the following means:
- Directly from school staff when they create and manage newsletter content through the platform
- From family members when they verify their email address to access protected photos or content
- Through automated collection technologies such as cookies, analytics tools, and server logs when users interact with the platform or published newsletters
- From schools when they provide account and billing information
- Through our inquiry and registration forms on ournewsletter.io
4. Why do we collect personal information?
We collect and use personal information for the following purposes:
- To provide and maintain the OurNewsletter platform for subscribing schools
- To enable schools to create, manage, and publish newsletter content to their community
- To verify the identity of family members accessing protected content, and to maintain an access log for the school
- To improve and develop the platform based on usage patterns and feedback
- To communicate with schools about their account, service updates, and support requests
- To process payments and manage billing
- To comply with legal obligations
5. Student data and content ownership
Newsletter content, including any student names, class information, or photographs, is managed entirely by the school. OurNewsletter provides the platform; the school determines what content is published, who can access it, and what level of privacy protection is applied.
We do not independently collect, use, or disclose student data. Student information only exists on our platform because a school staff member has chosen to include it in their newsletter content. Schools are responsible for ensuring they have appropriate consent and policies in place for any student information they publish.
6. To whom do we disclose personal information?
We may disclose personal information to:
- The subscribing school, including access logs of family members who have verified their identity to view protected content
- Service providers who assist us in operating the platform, including hosting, analytics, and email delivery services
- Professional advisors such as accountants and legal counsel
- Regulatory bodies or law enforcement agencies where required by law
We do not sell, rent, or trade personal information to third parties for marketing purposes.
7. Overseas disclosures
Our platform may use service providers located overseas for hosting, analytics, and email delivery (for example, services based in the United States). Where personal information is disclosed overseas, we take reasonable steps to ensure the recipient handles the information in accordance with the APPs.
8. Security of personal information
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. These steps include:
- Secure hosting and encrypted data transmission
- Access controls limiting who can view and manage data within the platform
- Regular review of our security practices
- Destruction or de-identification of personal information when it is no longer needed
9. Photo protection and access verification
OurNewsletter offers schools the ability to protect photographs of students by requiring readers to verify their identity before viewing images. When a reader verifies using their email address, we store the email address, date, time, and device type. This information is made available to the school as an access log.
Verification is designed to create accountability, not to guarantee the identity of every reader. It provides a meaningful barrier and an auditable record, which schools can review at any time.
10. Cookies and analytics
We use cookies and similar technologies to operate the platform, remember verification status, and collect anonymised usage analytics. Specifically, we use:
- Google Analytics to understand overall site usage patterns
- Microsoft Clarity to understand how users interact with the platform interface
- Session cookies to maintain verification status so family members do not need to re-verify on every visit
You may modify your browser settings to decline cookies, though this may affect the functionality of the platform, including the ability to view protected content without re-verifying.
11. Access and correction
You have the right to request access to, and correction of, any personal information we hold about you, in accordance with the Privacy Act 1988 (Cth). To make a request, please contact us using the details below. We may require proof of identity before processing your request and will respond within 30 days.
12. How to contact us
For any privacy-related questions, requests, or complaints, please contact our Privacy Compliance Officer:
Jacob Shultz
Privacy Compliance Officer
Bolsta Education
jacob@bolsta.education
13. Privacy complaints
If you believe your privacy has been breached, you may lodge a complaint with us using the contact details above. We will treat your complaint seriously, investigate promptly, and notify you of the outcome. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.