Stay to Grow Privacy Policy
Last updated: 31 October 2026 · Version: 1.0
1. Who is responsible for your information
Stay to Grow is an independent platform for discovering and comparing English-language and vocational courses in Australia. The platform is operated by Clara González Arrojo as an individual based in New South Wales, Australia. For privacy enquiries or to exercise your rights, contact [email protected]. Schools and other external services linked from the platform apply their own privacy policies when you visit their websites.
When you visit a school or third-party website linked from our platform, that third party is responsible for its own information practices under its privacy policy.
2. Scope
This policy applies when you visit staytogrow.com, browse course information, save courses in your browser or contact us using our enquiry form. It describes current practices; future features will be documented when introduced.
3. Information we collect
Enquiries: your email address, message, an optional telephone number, your marketing preference and additional information you choose to provide. Our form provider may record the date of submission and technical information needed to operate and protect the form.
Website use: technical service providers may process IP addresses, device and browser details, requested pages, timestamps and security logs. External maps, images or embedded forms may receive technical information when loaded.
Saved courses: favourites are stored locally in your browser. We currently do not require an account or synchronise saved lists across devices.
Areas of interest: the courses and destinations you mention in an enquiry may be used to respond and to understand demand. We do not assume that anonymous visits identify a particular individual. Any additional tracking of searches, clicks or campaigns will be assessed and disclosed when actually introduced.
Please do not include passport details, visa numbers, health records, bank details or sensitive documents in general enquiries. Unsolicited unnecessary personal information will be deleted or restricted where appropriate.
4. Purposes and legal grounds
We use information to receive, manage and respond to enquiries, provide requested information, maintain service security and availability, keep necessary administrative records and analyse internally which courses, providers and destinations generate interest, to improve the platform and plan our business.
Where EU data protection law applies, the legal grounds depend on the particular activity and may include steps requested before a contract, legitimate interests in responding to enquiries, preventing abuse and understanding service demand after balancing your rights, separate consent for email marketing where required, and compliance with applicable legal obligations. Contact us for information about the grounds applied to a particular activity.
Publishing this policy does not itself constitute consent to all uses. Where specific consent is necessary, we will request it separately.
5. News, recommendations and marketing emails
We will only send Stay to Grow promotional communications when you actively select the separate optional Updates and offers checkbox or another legally permitted basis applies in a specific case. This checkbox is unchecked by default. You can unsubscribe using each marketing message or by contacting us. We retain appropriate evidence of preferences so that we can respect your choices.
Submitting an enquiry does not automatically subscribe you to marketing, and marketing acceptance is never required to receive an enquiry response.
6. Internal demand analysis and commercial use
We may analyse enquiries, courses people ask about, destinations of interest and operational outcomes to improve our catalogue, prioritise providers, design services, measure support quality and plan our commercial strategy. Where reasonably practicable, we use aggregated or de-identified data rather than identifiable personal information.
We may produce and commercialise genuinely anonymous, aggregated statistical reports about education demand, taking reasonable steps to prevent individuals from being re-identified, including by combining information with other datasets. Data that remains identifiable will continue to be treated as personal information; merely removing names does not make it anonymous.
7. Schools, referrals and commissions
At present, a general enquiry to Stay to Grow is not automatically forwarded with your personal details to any school. You may follow links to schools, at which point their privacy practices apply.
We may in future enter into commercial arrangements involving permitted referrals, eligible enrolments, services or sponsored campaigns. Such arrangements do not automatically authorise sharing identifiable student information. If you specifically request an introduction to a particular school, we will explain which school would receive which details and why, obtain any required authorisation and keep an appropriate record. Paid relationships that could influence presentation will be disclosed transparently.
We do not currently sell a database of identifiable student contacts to schools or advertisers. Any future business model involving disclosure or trading of personal information will require a separate legal review, prior notice and appropriate permissions. Commercial remuneration does not alter your rights.
8. Service providers and recipients
We use Tally to collect and store form responses and provide owner notifications, Cloudflare to deliver and protect the website, and Supabase for the course catalogue and related records. We also use external maps, images and links to independent sites. Providers may process technical or, where necessary, personal information under their own contracts and policies.
According to Tally, form responses are hosted in European infrastructure. Depending on the service, other providers and subprocessors may process information in Australia, the European Union, the United States or other locations. We will maintain and verify information on locations and safeguards where the relevant law requires countries to be identified.
We may also disclose information when legally required, to protect against fraud or abuse or in a lawful business reorganisation, subject to applicable safeguards.
9. International data transfers
Some information may be processed outside Australia or your country of residence. We will take reasonable steps required by applicable law to assess recipients, restrict access and protect transfers. Where the GDPR or similar rules apply, we will review and implement the required legal transfer mechanisms before new disclosures.
10. Browser storage, cookies, maps and analytics
Favourites may be held in your browser's local storage. You can remove them within the website or by clearing local browser data. Security and embedded tools, including forms and maps, may use technical storage or connection data.
Our initial service does not claim to operate our own behavioural advertising or remarketing system. If we introduce identifiable analytics, targeted advertising tools or non-essential cookies, we will update this policy, explain the partners involved and implement consent or rejection options wherever required before enabling them.
11. How long we keep information
We retain enquiry data for as long as reasonably necessary to respond, follow up, handle requests or complaints, and comply with applicable legal obligations. We do not currently claim a fixed automated deletion period. Marketing preference records are retained as needed to manage subscriptions and opt-outs; technical providers also apply their own log retention periods. We will review, delete or de-identify data when it is no longer needed, unless legal retention is required.
You can request access, correction or deletion where applicable by writing to [email protected]. We will address relevant requests in Tally and other systems holding the data, subject to technical deletion cycles and legal exceptions.
12. Security
We restrict access to form responses and administrative services to authorised people and apply measures proportionate to risk, including permission controls, stronger authentication, encrypted connections where appropriate and incident review. No system is completely risk-free. If a personal data breach occurs, we will assess, contain and notify affected people or regulators where required by applicable law.
13. Your rights and choices
You may ask what personal information we hold, request access or correction, and request erasure where applicable. You may also object to certain uses, withdraw consent or unsubscribe from marketing. If GDPR or other laws apply to you, we will also assess applicable requests for portability, restriction or objections.
Contact [email protected]. We may reasonably verify identity before disclosing or changing personal information. No Stay to Grow user account is needed to exercise applicable rights.
14. Complaints
You can raise a privacy complaint at [email protected]. We will review it and respond within a reasonable period consistent with applicable rules. If our operations are subject to the Australian Privacy Act 1988 and your complaint remains unresolved, you may contact the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au/. Where applicable, you may also complain to the appropriate EU or other data protection authority.
15. Children
The platform is not designed to solicit sensitive data from children or to direct marketing specifically to children. Minors requiring assistance should share only necessary details and involve a parent or guardian where required by law or the service. We will review appropriate safeguards before introducing child-focused services.
16. Automated decisions and future developments
Search and recommendation tools may order course information, but we do not currently make solely automated decisions with legal or similarly significant effects on students. If we introduce significant individual profiling or automated decisions, we will assess legal grounds, transparency, rights and safeguards before activation.
We may introduce accounts, apps, referral programmes, subscriptions, premium services, payments, advertising or B2B products. These features are not authorised in advance by this notice: before material new uses of personal information, we will publish appropriate notices or supplements and obtain any permissions required.
17. Changes and contact
This policy is freely available at https://staytogrow.com/privacy.html. We will update it when our practices, providers or legal obligations change, and communicate material changes as appropriate. Contact: [email protected].