Privacy Policy

At Time Tink Pty Ltd (“Time Tink”, “we”, “us”, or “our”), we are committed to protecting the privacy of all users of our services. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website https://www.timetink.com.au ("Website") and the related services, content, products, and functions ("Services").

We handle all personal data in accordance with the Privacy Act 1988 (Cth), Australian Privacy Principles (APPs), and, where applicable, the General Data Protection Regulation (GDPR).

1. Purpose

This Privacy Policy outlines:

What personal data we collect
Why we collect it
How we use and share it
The steps we take to protect it
Your rights and choices

By using the Website or Services, you consent to the practices described in this Privacy Policy.

2. Our privacy principles

We adhere to the following privacy principles:

We collect data only for clear and valid purposes
Access is restricted to those who need it
System access is granted on a ‘need-to-know’ and minimum privilege basis
We regularly review security and access protocols

3. What we collect, and why we collect it

We collect personal information to deliver, maintain, and improve our Services. We collect information:

A. From your institution

When your university or organisation integrates Time Tink into its systems, we may receive:

Learner data: name, university email, unique student ID, enrolment details and institution name
Supervisor data: name, position, organisation email, and organisation name

Note: We do not receive your university passwords or access credentials.

B. From your direct use of Our Services

We collect:

Cookies: Secure cookies authenticate access and improve your experience. We do not share these with advertisers. See Cookie Policy
Device and IP data: Helps us maintain security and optimise performance
Usage activity: For example, activity reports or session data to help us diagnose issues and improve the platform
Support information: Such as your name and email when you contact us

4. How we use Your Information

We use your personal information to:

Set up and manage user accounts
Deliver and improve Services
Provide support and communicate with you
Ensure security and prevent misuse
Fulfil legal and regulatory obligations
Analyse trends and system performance

5. Sharing Your Information

We do not sell your data. We only share it under these circumstances:

A. With Your Institution

For account management, support, reporting, and integration
Only accessible to technical/support staff on a need-to-know basis
Anonymised or dummy data is used for high-risk feature testing

B. With Service Providers

We use Servers Australia to securely host and manage data. Data is stored within Sydney, Melbourne, or Brisbane and is not transferred internationally.

C. For Legal or Security Reasons

We may disclose personal information if required to:

Comply with laws or valid legal processes
Enforce our Terms of Service
Detect or prevent fraud or security risks
Protect Time Tink, its users, or the public

6. Security measures

We take your privacy seriously and use strong technical and organisational safeguards:

All data is transmitted using SSL encryption
Data is stored on secure infrastructure hosted in Australia
OAuth 2.0 token-based authentication is used
Signed, secure HTTP cookies manage user sessions
Regular audits of code, access logs, and security practices
Staging and live environments are separated
Planned support for third-party identity providers (e.g. SAML, Google OAuth)

7. Data Retention

We retain personal information only as long as necessary:

To deliver our services
To comply with legal or contractual obligations
To meet institutional reporting needs

Data may be anonymised and retained for research or service improvement.

8. Your Rights

Depending on your jurisdiction, you have the right to:

Access personal data we hold about you
Correct inaccurate or outdated data
Delete your personal data (subject to legal exceptions)
Object or restrict certain uses of your data
Withdraw consent where processing is based on consent
Complain to a relevant authority

To exercise these rights, email us at admin@timetink.com.au

9. Complaints

If you have any complaints about how we have handled your personal information, please contact admin@timetink.com.au. We take complaints seriously and will endeavour to respond within a reasonable time of receiving written notice of your complaint.

If you have not received a response of any kind in relation to your complaint within 30 days, you have the right to take the matter directly to the Office of the Australian Information Commissioner (OAIC).

10. Compliance and Oversight

We regularly review our compliance with our Privacy Policy. Where applicable, we cooperate with data protection regulators and aim to resolve issues directly with users. Time Tink is committed to GDPR compliance.

11. Changes

This Privacy Policy may be updated occasionally to reflect:

Changes in our practices
New features or integrations
Legal or regulatory changes

We will not reduce your rights under this policy without your consent. The most current version will always be available on our Website.

Last updated - 10 June 2025