Effective Date: 1 March 2025

​

Atlantis Timetabling Pty Ltd (“we”, “us”, or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, and safeguard information when you use the Atlantis software platform (the “Service”).

​

1. Our Role: Data Processor vs. Data Controller

​

Under Australian Privacy Law, there is a distinction between who owns the data and who processes it:

• The School is the Data Controller: The school owns and controls all data related to its students, staff, and internal timetabling ("School Data").

• Atlantis is the Data Processor: We process School Data solely on behalf of the school and in accordance with their instructions to provide the Service.

​

2. Information We Collect

​

We collect three categories of information:

• Account Information: Personal information of authorized school personnel (e.g., name, school email, and phone number) used to manage your account.

• School Data: Information uploaded by the school to generate timetables. This may include student names, year levels, teacher names, subject choices, and room availability.

• Technical Data: Information automatically collected via cookies and logs, such as IP addresses, browser types, and usage patterns, to ensure the security and performance of the Service.

 

3. How We Use Your Information

 

We use your data strictly for the following purposes:

• To provide and maintain the timetabling and organizational features of Atlantis.

• To provide customer support and troubleshoot technical issues.

• To monitor for unauthorized license sharing or security threats.

• To comply with legal obligations and enforce our Terms of Service.

 

Note: We do not sell, rent, or trade your data to third parties for marketing or advertising purposes.

 

4. Data Security and Storage

 

The security of your school’s data is our highest priority:

• Data Residency: All School Data is stored on secure servers located within Australia (specifically the Brisbane Region) to ensure data sovereignty.

• Encryption: We use industry-standard encryption (SSL/TLS) for all data in transit and SHA-256 encryption for data at rest.

• Access Control: Access to School Data is restricted to authorized school personnel and a limited number of Atlantis staff required for technical support.

 

5. Disclosure of Information

​

We only disclose information in the following limited circumstances:

• Service Providers: To trusted third-party vendors (e.g., cloud hosting or database services) necessary to operate the Service, provided they comply with strict confidentiality obligations.

• Legal Requirements: Where required by Australian law or to protect the safety and rights of our users.

• Business Transfers: In the event of a merger or sale, where the acquiring entity must uphold the same privacy protections.

 

6. Data Retention and Deletion

​

• Active Subscriptions: We retain data for the duration of your subscription.

• Termination: Upon cancellation of your subscription, we will retain your data for 90 days to allow for retrieval. After that period, we will seek your instructions on what to do with your data, either keep archived, anonymise or permanently delete the data.

 

7. Your Rights and Access

​

Under the Australian Privacy Principles, users have the right to:

• Access the personal information we hold about them.

• Request the correction of inaccurate or out-of-date information.

• Lodge a complaint if they believe their privacy has been breached.

 

8. Changes to This Policy

​

We may update this Privacy Policy from time to time. We will notify you of any significant changes via the email address associated with your account or through a prominent notice on the Service.

 

9. Contact Us

​

For any questions regarding this Privacy Policy or to exercise your privacy rights, please contact:

Privacy Officer

Atlantis Timetabling Pty Ltd

Email: legal@atlantis.education