Who we are

STEM Camp operates the website at https://stemcamp.com.au. We provide educational STEM programs and events for children. Protecting your privacy is important to us and we comply with the Australian Privacy Principles (APPs).

Purpose

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in line with the APPs.

Collection of personal information

We collect personal information necessary to deliver our programs and services, including in order to:

• Enrol children and manage participation in STEM Camp activities (including where enrolments are limited for gender-specific programs).
• Manage program operations (e.g., allocate children to groups appropriate for age/ability/gender).
• Communicate with parents/guardians, authorised pick-up contacts and emergency contacts, including program or venue changes and responses to enquiries.
• Promote our activities and programs, including early-bird and special offers (only where you have opted in).
• Complete transactions (e.g., process payments, issue credits where applicable).
• Conduct reference checks and onboard staff and volunteers.
• Manage risk, safety and wellbeing of participants and staff.
• Meet legal, insurance and regulatory obligations.

We may collect information from:

• Parents or guardians via our website enrolment portal and forms.
• Electronic communications (email, SMS, website forms, or social media messages).
• In-person interactions during delivery of STEM Camp activities.
• Children during activities (e.g., feedback and surveys) with parental consent.
• For staff: directly from you or via third parties (e.g., Working With Children clearances or referees) during recruitment and employment.

Our website may use cookies to analyse traffic and improve your experience. Most browsers accept cookies by default; you can change your settings to decline cookies, though some features may not function. Third-party services (e.g., Google Ads) may use cookies to show relevant ads on this or other websites.

Information we collect

• Child details: name, address, date of birth, gender, medical/health information (where necessary), and emergency contacts.
• Parent/guardian contact details and details of authorised pick-up persons.
• Registration and participation information, feedback and survey responses.
• Payment information (processed securely by our payment providers; we do not store full credit-card numbers on our servers).
• For staff: name, address, date of birth, contact details, emergency contact, medical information (where relevant), bank details and government identifiers required for tax and superannuation.

We do not collect other personal information unless you provide consent or it is otherwise permitted or required by law.

Children’s information & parental consent

Because our programs serve children, we collect child information only with the consent of a parent or legal guardian. Parents/guardians may request access to, correction of, or deletion of their child’s personal information (subject to legal and safety requirements).

Storage and security

Personal information is stored in secure cloud systems with restricted, password-protected access for authorised staff and administrators only. We use reasonable physical, technical and organisational safeguards to protect against misuse, interference, loss, and unauthorised access, modification or disclosure.

While we aim to keep personal data in Australia, some cloud services may store or process data overseas. Where this occurs, we implement appropriate safeguards (e.g., access controls and encryption). We do not otherwise disclose personal information to overseas recipients except as permitted by law.

Transmission of information over the internet involves risks. We cannot guarantee the security of information transmitted to or from us via third-party systems or the internet, and such transmission is at your own risk.

We may use reputable third-party solutions to process specific categories of information (e.g., payments, email, forms). We take reasonable steps to assess and monitor those providers’ security controls to protect shared personal information.

If we no longer need personal information for our business activities and are not required by law to retain it, we will take reasonable steps to de-identify or securely destroy it.

Use

We use and disclose personal information to deliver and improve our programs and services, to communicate with you about your bookings, and to provide updates about our services. We may use personal information for marketing where you have opted in. We do not sell personal information.

For staff, we use personal information to conduct screening, reference checks and manage employment.

Disclosure

By providing personal information, you consent to its handling in accordance with this policy. We may disclose personal information to our officers, staff, professional advisers, agents and contractors where reasonably necessary to operate our services. Personal information is only provided to third parties to the extent required for service delivery, and we take reasonable steps to protect that information.

• In emergencies, we may disclose relevant information to medical personnel.
• We may disclose information to third-party venues or transport providers where required for health and safety.
• We may disclose information where required or authorised by law (e.g., court orders, law enforcement or child-protection requests).

If there is a change of control or sale of our business, we may transfer our user databases (including personal and non-personal information) to the extent permitted by law, under confidentiality obligations and only in good faith.

Third-party services we use

• WooCommerce – online registrations and orders
• Stripe and/or PayPal – secure payment processing
• WPForms – contact, registration and consent forms
• Email/SMS providers – service updates and confirmations
• Analytics/ads providers (e.g., Google) – site analytics and optional advertising

These services handle data under their own privacy policies in addition to ours.

Access and correction

You may request access to, or correction of, personal information we hold about you (or your child) by emailing contact@stemcamp.com.au. We will respond within a reasonable timeframe. An administrative fee may be charged for providing copies of information.

Third-party sites

Our website may contain links to third-party websites. These links are provided for convenience only and do not constitute sponsorship or endorsement. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy statements of any site you visit.

Complaints about privacy

If you believe your personal information has not been handled in accordance with the APPs, please email contact@stemcamp.com.au. We will investigate and aim to respond promptly. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

We may update this policy from time to time. The latest version will be published on our website and takes effect when posted. Please check back periodically for updates.

Questions

For any privacy questions, please contact us at contact@stemcamp.com.au.