Your data,
handled with respect

Edvise Education Agency Pty Ltd is the data controller for personal data collected through edvise.com.au and our related services. We are based in Sydney, NSW, Australia.

You can reach us any time at info@edvise.com.au for privacy-related requests, questions or complaints.

We only collect data that you actively give us or that we need to run the site. Nothing is bought from third parties.

• Contact form: name, email, phone (optional), message.
• Free consultation form: name, email, phone, preferred contact time, brief about your situation.
• Newsletter: email address and language preference.
• Chat (Evie): the messages you send to our AI assistant.
• Cookies & analytics: anonymous traffic patterns (only if you consent) - see section 07.

We only use your data for the purpose you gave it to us for.

• Reply to your enquiry and provide the education guidance you asked for. Legal basis: performance of a contract / your request (Art. 6.1.b GDPR).
• Send you the newsletter you signed up for. Legal basis: your consent (Art. 6.1.a GDPR).
• Improve the site using anonymised analytics. Legal basis: your consent via cookie banner.
• Meet legal obligations (accounting, tax, disputes). Legal basis: legal obligation and legitimate interest.

We do not sell your data. We only share what is strictly necessary with trusted service providers who are contractually bound to protect it.

• Resend - email delivery for contact form + newsletter (EU + US infrastructure).
• Anthropic - powers our AI assistant Evie when you chat with us (US-based).
• Google Analytics - anonymised traffic statistics, only if you accept analytics cookies (US).
• Vercel - hosts the website (US + EU edge).
• Upstash Redis - stores non-personal application state (EU).

Some of our providers are based outside the European Economic Area, mainly the United States. These transfers are protected by Standard Contractual Clauses approved by the European Commission and, where applicable, the EU-US Data Privacy Framework.

We keep your data only as long as it is needed for the purpose it was collected.

• Contact & consultation enquiries: up to 3 years from last contact, then deleted.
• Newsletter subscribers: until you unsubscribe (one-click in every email).
• Chat transcripts: up to 90 days for quality and safety review, then deleted.
• Analytics data: 14 months, anonymised at collection.
• Accounting records: as required by Australian tax law (typically 5 years).

We use three categories of cookies. You control the last two via the banner on your first visit - or any time from the Cookie preferences link in the footer.

• Necessary - remember your language and consent choice. Always on, cannot be disabled.
• Analytics - Google Analytics 4 to understand which pages help students most. Off by default.
• Marketing - to measure the reach of our outreach and ads. Off by default.

Under GDPR (and equivalent Australian privacy laws) you have the right to:

• Access your data - we send you a copy.
• Rectify anything that is wrong or out of date.
• Erase your data (right to be forgotten) where the law allows.
• Restrict or object to certain processing.
• Portability - receive your data in a common format.
• Withdraw consent at any time - it doesn't affect processing that already happened.
• Lodge a complaint with your local data protection authority (in Poland: UODO; in Australia: OAIC).

Data in transit is protected by TLS. Access to systems is restricted to team members who need it, protected by unique accounts and MFA where available. We review our security controls regularly and respond to incidents transparently.

We may update this policy from time to time - for example when we add a new tool or change how we handle data. The date at the top of this page always reflects the latest version. Material changes will also be announced by email if you are subscribed to our newsletter.