Last Updated: November 2026

Brilliant Minds Australia Pty Ltd (“we”, “us”, “our”) is committed to protecting the privacy, confidentiality and security of all customers, particularly NSW schools, educators and students. We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the NSW Department of Education’s Information Security Requirements.

This Privacy Policy explains how we collect, use and protect your information.

1. Information We Collect

We only collect information necessary to operate our business, fulfil orders and meet NSW Education contract obligations. This includes:

• Name, email, phone number and school details
• Delivery addresses and authorised recipients
• Purchase orders, transaction history and invoicing
• Communications with our support team
• Information provided when requesting quotes or assistance

We do not intentionally collect sensitive information or unnecessary student data.

We do not collect behavioural data or analytics through cookies.

2. How We Collect Information

We collect information directly from:

• Orders placed on our website
• Contact forms
• Email or phone communications
• NSW Education punch-out / eCatalogue integration
• School purchase orders
• Requests for quotes, product sourcing or support

We only use essential cookies needed for the cart and login. We do not use tracking, analytics or advertising cookies, pixels or behavioural profiling.

3. How We Use Personal Information

We use collected information to:

• Process and deliver orders
• Provide customer support
• Verify eligibility for NSW Education contract pricing
• Produce reporting required under the Head Agreement (e.g., Monthly Granular Spend Data)
• Maintain accurate records for invoicing and compliance
• Communicate operational or delivery updates
• Meet legal, tax or regulatory obligations

We will never sell, trade or rent personal information.

4. NSW Department of Education Information Security Compliance

We comply with all NSW DoE Information Security Requirements, including:

• Data stored only in approved locations (Australia-based hosting)
• TLS 1.2+ encryption for data in transit
• 256-bit encryption for data at rest
• Role-based access control and MFA for internal systems
• Employee screening, police checks and WWCC where required
• Strict third-party approvals for data handling
• Immediate reporting and remediation of security incidents
• Daily automated backups with annual restoration testing
• Annual penetration testing and vulnerability assessments

5. Disclosure of Personal Information

We may disclose information only when required to:

• Deliver orders using trusted logistics partners
• Provide reporting to NSW Education under contract
• Engage IT service providers who support secure hosting
• Comply with legal obligations

Subcontractors and service providers must comply with the same security and confidentiality standards.

6. Data Storage, Retention & Destruction

Data is stored securely on Australian servers with restricted access.

We retain information only for:

• Contractual requirements
• Delivery and operational needs
• Legal record-keeping periods

When no longer required, data is securely destroyed or anonymised.

7. Access, Correction & Deletion Requests

You may request access to or correction of your information at any time by emailing info@brilliantminds.com.au.

8. Privacy Complaints

If you have concerns or wish to lodge a complaint:

1. Contact us at info@brilliantminds.com.au
2. If unresolved, contact the Office of the Australian Information Commissioner (OAIC)

We respond to all concerns promptly and professionally.