1. About This Policy

Galileo Spanish Australian Preescolar (“we”, “us”, “our” or “Galileo SAP”) is committed to protecting your privacy and handling your personal information in a responsible manner in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This Privacy Policy explains how we collect, hold, use, and disclose personal information about individuals we deal with, including parents/guardians, prospective families, children, staff, contractors, and visitors to our website.

A copy of the Australian Privacy Principles may be obtained free of charge from the website of the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

2. What Personal Information Do We Collect and Hold?

The kinds of personal information we collect and hold include:

• For parents/guardians and prospective families — name, residential and postal address, email address, telephone/mobile number, date of birth (where relevant), emergency contact details, payment/banking information (for fees), information about your child/children, family circumstances relevant to enrolment and care, photos/videos of your child (with consent), correspondence, and any other information you provide to us.

• For children — name, date of birth, gender, health/medical information (including immunisation records, allergies, medications, and developmental information), dietary requirements, authorised collection/nomination details, incident/accident reports, photos/videos, and any other information necessary for providing safe education and care.

• For website visitors — IP address, browser type, device information, pages visited, time/date of access, referring website, and other standard web analytics data (collected automatically via cookies and similar technologies).

• For staff/contractors — name, contact details, date of birth, tax file number, superannuation details, qualifications, working with children check, employment history, payroll information, and performance records.

We may also collect sensitive information (such as health information about children, racial/ethnic origin where relevant to the bilingual programme, or criminal history for staff clearances) only when it is reasonably necessary for our functions or activities, and normally with your consent.

3. How Do We Collect Personal Information?

We collect personal information:

• Directly from you (e.g., through enrolment forms, website enquiry/contact forms, emails, telephone calls, tours, interviews, or when you provide information about your child).

• From third parties (e.g., previous childcare providers, medical professionals, government agencies such as Centrelink, or authorised emergency contacts — with your consent where required).

• Automatically through our website and online systems (cookies, analytics tools, etc.).

We will generally collect personal information directly from you unless it is unreasonable or impracticable to do so.

4. Why Do We Collect, Hold, Use, and Disclose Personal Information?

We collect, hold, use, and disclose personal information for the primary purposes of:

• Providing early childhood education and care services, including our unique Spanish-integrated bilingual programme.

• Administering enrolments, waitlists, attendance, billing, and payments.

• Ensuring the safety, health, and wellbeing of children in our care (including medical emergencies and incident reporting).

• Communicating with families about your child’s progress, daily activities, events, photos/videos, newsletters, and programme updates.

• Complying with our legal obligations (e.g., National Quality Framework, child protection reporting, immunisation registers, and record-keeping requirements).

• Marketing and promoting our services (only with your consent where required).

• Improving our website and services (through anonymised analytics).

• Responding to enquiries, complaints, or feedback.

5. Disclosure of Personal Information

We may disclose your personal information to:

• Authorised third-party service providers (e.g., IT/cloud providers, payment processors, photographers, insurers, professional advisers such as accountants/lawyers).

• Government agencies or regulators (e.g., ACECQA, Department of Education, child protection authorities) where required or authorised by law.

• Other education/care providers (with your consent) if a child transitions to another service.

• Emergency services or medical professionals in health/safety situations.

We do not normally disclose personal information to overseas recipients. If we do so in the future (e.g., cloud storage providers located overseas), we will take reasonable steps to ensure the recipient complies with the APPs or is subject to equivalent privacy protections, and we will update this policy accordingly.

6. Cookies and Website Tracking

Our website uses cookies and similar technologies to improve user experience, analyse traffic, and for security. You can manage cookies through your browser settings, but this may affect website functionality.

We may use third-party analytics providers (such as Google Analytics) that may process data outside Australia. For more information, see our cookie policy [link if separate] or contact us.

7. How Do We Protect Personal Information?

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps include:

• Physical security measures (locked filing cabinets, secure premises).

• Electronic security measures (firewalls, encryption, passwords, access controls).

• Staff training on privacy obligations.

• Secure disposal/de-identification of information when no longer needed.

8. Access to and Correction of Your Personal Information

You may request access to the personal information we hold about you (subject to exceptions under the Privacy Act).

We will generally provide access within a reasonable period and without charge (or for a minimal fee for processing).

If you believe information is inaccurate, incomplete, out-of-date, irrelevant, or misleading, you may request correction. We will take reasonable steps to correct it.

To request access or correction, please contact our Privacy Officer (details below).

9. Anonymity and Pseudonymity

Where it is lawful and practicable, you have the option of dealing with us anonymously or using a pseudonym (for example, when making a general enquiry). However, this may not be possible when enrolling a child or when we are required by law to identify you.

10. Complaints

If you are concerned about a possible breach of the Australian Privacy Principles or this policy, please contact us in the first instance.

We will acknowledge your complaint within 5 business days and aim to investigate and respond within 30 days.

11. Contact Us

If you have any questions about this Privacy Policy, wish to access/correct your information, or have a privacy concern, please contact:

Privacy Officer Galileo Spanish Australian Preescolar 28 Astrolabe Street Red Hill ACT 2603 Australia at galileosap28@gmail.com

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available on our website at https://www.galileosap.com/privacy-policy (or similar link).

We encourage you to review this policy periodically.