Privacy

This Policy applies as between you, the User of this Website, and Challenge The Way You Think Ltd, trading as Edustack, the owner and provider of this Website. This Policy applies to Our use of any and all Data collected by Us in relation to your use of the Website and any Services or Systems therein.

At Edustack, We put people at the heart of everything We do — and that includes protecting your personal information. This Privacy Policy explains how We collect, use, and safeguard your Data when you use Our Website and learning platform.

In this Policy the following terms shall have the following meanings:

Account: means collectively the personal information, Payment Information and credentials used by Users to access Material and/or any communications System on the Website;

Content: means any text, graphics, images, audio, video, software, data compilations and any other form of information capable of being stored in a computer that appears on or forms part of this Website;

Cookie: means a small text file placed on your computer by Edustack Ltd when you visit certain parts of this Website. This allows Us to identify recurring visitors and to analyse their browsing habits within the Website.

Data: means collectively all information that you submit to the Website. This includes, but is not limited to, Account details and information submitted using any of Our Services or Systems;

Edustack: means Edustack, Owned by Challenge The Way You Think, Auckland, New Zealand;

Service: means collectively any online facilities, tools, services or information that Edustack makes available through the Website either now or in the future;

System: means any online communications infrastructure that Edustack makes available through the Website either now or in the future. This includes, but is not limited to, web-based email, message boards, live chat facilities and email links;

User/Users: means any third party that accesses the Website and is not employed by Edustack and acting in the course of their employment; and

Website: means the website that you are currently using (learningcentre.edustack.co.nz) and any sub-domains (e.g. subdomain.yourschool.com) of this site unless expressly excluded by their own terms and conditions.

Without limitation, any of the following Data may be collected:

2.1 Name;
2.2 Date of birth;
2.3 Job title & profession;
2.4 Contact information such as email addresses and telephone numbers;
2.5 Demographic information such as postcode, preferences and interests;
2.6 Financial information such as credit / debit card details (see Clause 3 and “Payments” below);
2.7 IP address (automatically collected);
2.8 Web browser type and version (automatically collected);
2.9 Operating system (automatically collected);
2.10 A list of URLs starting with a referring site, your activity on this Website, and the site you exit to (automatically collected); and
2.11 Cookie information (see Clause 10 below).

In addition, Edustack may collect:

Learning activity data (course enrolments, progress, completion data);
Employer-provided information if your organisation enrols you in courses.

3.1 Any personal Data you submit will be retained by Edustack for as long as you use the Services and Systems provided on the Website. Data that you may submit through any communications System that We may provide may be retained for a longer period as required by law.
3.2 Unless We are obliged or permitted by law to do so, and subject to Clause 4, your Data will not be disclosed to third parties. This includes our affiliates and/or other companies within our group.
3.3 All personal Data is stored securely in accordance with the principles of the NZ Privacy Act 2020, GDPR, and UK GDPR. For more details on security, see Clause 9 below.
3.4 Any or all of the above Data may be required by Us from time to time in order to provide you with the best possible service and experience when using Our Website. Specifically, Data may be used by Us for the following reasons:

We use Stripe to process payments securely. When you make a payment, your credit or debit card details are collected and processed directly by Stripe in accordance with their Privacy Policy and PCI-DSS (Payment Card Industry Data Security Standard).

Edustack does not store your full payment information. We may receive limited details from Stripe — such as the last four digits of your card, the card type, and your billing address — to help Us confirm transactions, manage accounts, and meet compliance obligations. For more information, please see Stripe’s Privacy Policy.

Edustack may, from time to time, employ the services of other parties for dealing with matters that may include, but are not limited to:

payment handling (Stripe);
learning management system hosting (LearnWorlds);
delivery of purchased items;
search engine facilities;
advertising and marketing;
analytics and usage monitoring.

The providers of such services do not have access to certain personal Data provided by Users of this Website. Any Data used by such parties is used only to the extent required by them to perform the services that Edustack requests. Any use for other purposes is strictly prohibited. Furthermore, any Data that is processed by third parties must be processed within the terms of this Policy and in accordance with the NZ Privacy Act 2020, GDPR, and UK GDPR.

5.1 Edustack may, from time to time, expand or reduce its business and this may involve the sale of certain divisions or the transfer of control of certain divisions to other parties. Data provided by Users will, where it is relevant to any division so transferred, be transferred along with that division and the new owner or newly controlling party will, under the terms of this Policy, be permitted to use the Data for the purposes for which it was supplied by you.

5.2 In the event that any Data submitted by Users will be transferred in such a manner, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your Data deleted or withheld from the new owner or controller.