1.We respect your privacy
Clever Little Schoolhouse ("OwnStack", "we", "us" or "our") respects your privacy and is committed to protecting the personal information we hold about you. We are a business based in Victoria, Australia, and we handle personal information in line with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth).
This policy explains what personal information we collect, why we collect it, how we use and disclose it, and how you can reach us. It applies to the cleverlittleschoolhouse.com website and to the relationship we have with you when you buy OwnStack. For the terms that govern your purchase and use of OwnStack, please also read our Terms and Conditions.
2.Collection of personal information
Most of the personal information we hold is information you give us directly. We collect it when you visit or interact with our website, email us, sign up for a free resource, or buy OwnStack. It can include:
- Your name, when you buy, sign up for a resource, or contact us.
- Your email address, for your receipt, product delivery, support and, with your consent, marketing.
- Your phone number, where you choose to give it to us.
- Payment confirmation data from our payment processor, described below.
- The contents of any message you send us, and anything you choose to include in it.
We use this information to deliver OwnStack and any add-ons you buy, to provide support, to send you receipts and important service messages, and, where you have agreed, to send you marketing about OwnStack and related content. Every marketing email includes an unsubscribe link, and you can opt out at any time by clicking it or by emailing us. Opting out of marketing does not stop essential messages such as receipts and service or security notices, which we need to send as part of our relationship with you.
Payments. Your payment is processed by Stripe. Stripe collects and handles your card details directly, and we never see or store your full card number. We receive only limited confirmation data, such as the payment status, an order reference, the amount and currency, and the billing name and email for the purchase.
Referrals. If you join our referral program, we also collect the details we need to enrol you and pay your commissions, including the Stripe Connect account details that Stripe requires.
3.Sensitive information
Sensitive information has the meaning given by applicable privacy law (in Australia, the Privacy Act 1988 (Cth)), and includes information about your health, race, ethnicity, religious or political beliefs, and similar matters. We do not seek sensitive information through our website, and we ask that you do not send it to us.
If we ever hold sensitive information about you, we will use and disclose it only for the primary purpose for which it was collected, for a related secondary purpose you would reasonably expect, with your consent, or where we are otherwise required or authorised by law.
5.Collecting information from third parties
Wherever it is reasonable and practical to do so, we collect personal information directly from you. Sometimes we receive information about you from a third party, for example our payment processor confirming a purchase, or a person who refers you to us through our referral program.
If a third party gives us personal information about you, we will take reasonable steps to let you know, unless you would already expect us to hold that information.
6.Disclosure of personal information
We disclose your personal information only to the service providers we need to run our business, and only for the purposes described in this policy. We do not sell your personal information. The main providers we share information with are:
- Stripe, for payment processing and referral payouts.
- Resend, for sending our transactional and marketing emails.
- Cloudflare, for website hosting, delivery and security.
- Google, Meta and Microsoft, for the analytics and advertising tools described above.
Each of these providers handles your information under its own privacy policy. We may also disclose personal information where we are required or authorised to do so by law, or where it is necessary to protect our rights, property or safety or those of others. Other than as described here, we disclose your personal information only with your consent.
7.Security of personal information
We store personal information securely and take reasonable steps to protect it from misuse, loss and unauthorised access, including using reputable providers, encrypted connections (HTTPS), and keeping card handling with Stripe so that we never store your card number. No method of storage or transmission is completely secure, so while we work hard to protect your information we cannot guarantee absolute security.
When we no longer need your personal information, and we are not required by law to keep it, we take reasonable steps to destroy it or permanently de-identify it.
8.Access to your personal information
You may request access to the personal information we hold about you at any time by contacting us in writing at the details below. There is no fee for making a request, although we may charge a reasonable administrative cost for supplying copies of the information.
We will respond to your request within a reasonable time. To protect your privacy, we may first need to confirm your identity before we release any information.
9.Keeping your information accurate
We want the personal information we hold about you to be accurate, complete and up to date. If any of the information we hold is wrong, or if it changes, please let us know and we will correct it.
10.The software you buy runs on your own accounts
OwnStack is software you install and run on your own accounts with providers such as Cloudflare, Stripe and Resend. This policy covers only the personal information we handle on this website and in our sale of OwnStack to you.
In plain terms: once you deploy and operate OwnStack, you, not us, are responsible for your own end-customers' personal information, and that information lives in your accounts, not ours. As the person running your instance you are the data controller for your customers' data, and you are responsible for your own privacy policy and for handling that data lawfully. See our Terms and Conditions for more.
11.International users
We are based in Australia and serve customers worldwide. Your information is processed by us in Australia and by the service providers described above, some of whom store or process data in the United States or other countries (for example Cloudflare, Stripe, Resend, Google and Meta). Where your information leaves your country, it is protected by those providers' safeguards and contractual commitments.
Depending on where you live (for example in the United Kingdom or the European Union), you may have additional legal rights over your personal information, such as rights to access, correct, delete, restrict or port it, or to object to certain processing. We honour reasonable requests to exercise these rights regardless of where you live; contact us using the details below.
12.Updates to this policy
We may update this Privacy Policy from time to time. The current version is always available on our website, and we will change the "Last updated" date at the top of this page when we make changes. Please review it from time to time so you stay informed.
13.Complaints and enquiries
If you have any questions about this policy, if you would like to access or correct your information, or if you wish to make a complaint about how we have handled your personal information, please contact us:
Clever Little Schoolhouse (OwnStack)
[YOUR BUSINESS ADDRESS]
hello@cleverlittleschoolhouse.com
We will always try to resolve your concern directly. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC), or, if you are outside Australia, the privacy or data-protection authority in your own country.