Privacy Policy
At Edustack, we put people at the heart of everything we do — and that includes protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our website and learning platform.
Who are we?
Edustack is a learning platform designed to deliver capability-focused, story-led learning. When you access our services, you may also be redirected to our Learning Management System (LMS), hosted by LearnWorlds, which supports the delivery of our modules.
What Information We Collect
We may collect the following types of information:
-
Personal details (name, email address, contact details)
-
Account information (login credentials, preferences)
-
Learning activity (course enrolments, progress, completion data)
-
Technical information (IP address, browser type, cookies, usage data)
-
Payment details (see below)
Payments
We use Stripe to process payments securely. When you make a payment, your credit or debit card details are collected and processed directly by Stripe in accordance with their Privacy Policy and PCI-DSS (Payment Card Industry Data Security Standard).
Edustack does not store your full payment information. We may receive limited details from Stripe — such as the last four digits of your card, the card type, and your billing address — to help us confirm transactions, manage accounts, and meet compliance obligations.
For more information, please see Stripe’s Privacy Policy.
How We Collect Your Information
-
Directly from you when you sign up, log in, or contact us.
-
Automatically, through cookies and analytics tools.
-
From your employer (if your organisation enrols you).
How We Use Your Information
We use your information to:
-
Provide you with access to Edustack modules.
-
Process and manage payments.
-
Track your learning progress.
-
Communicate updates and new Stack releases.
-
Improve our services.
-
Meet legal and compliance obligations.
LearnWorlds LMS
When you create an account or log in, you will be redirected to LearnWorlds, our LMS provider. LearnWorlds processes certain data (such as your name, email, and learning progress) on our behalf. Edustack remains the data controller, while LearnWorlds is the data processor. LearnWorlds complies with GDPR and stores data securely, which may include transfers outside New Zealand.
Sharing Your Data
We do not sell your data. We may share information with:
-
Service providers (like LearnWorlds and Stripe).
-
Regulators or authorities when legally required.
Your Rights
-
Under the NZ Privacy Act 2020, you can access and correct your personal information.
-
Under GDPR, you also have rights to erasure, portability, restriction, and objection.
How Long We Keep Data
We keep your data for as long as needed to provide services, or as required by law.
Contact Us
If you have questions, contact us at:
If you are in NZ, you can also contact the Office of the Privacy Commissioner. If you are in the EU/UK, you may contact your local Data Protection Authority.