Privacy Policy – Data InformEd
Last updated: 9th May 2025
Data InformEd is a New Zealand-based education consultancy that supports schools and organisations to make sense of data for meaningful educational improvement. We are committed to upholding the principles of the Privacy Act 2020 and treating all data—especially identifiable information about children—with the highest levels of care, transparency, and respect.
Depending on the project, Data InformEd may act as a data controller (deciding how and why data is used) or a data processor (handling data on behalf of the client). These roles are confirmed in writing before each project.
2. What Types of Data We Work With
We may work with a range of personal and educational data, including:
Full names, NSNs or student IDs
Demographics (e.g. ethnicity, gender)
Attendance and engagement records
Achievement and assessment data
Behavioural and wellbeing indicators
Teacher or whānau input (e.g. open responses)
Sensitive or special-category data (e.g. disability, neurodiversity, or health-related data) is not routinely collected but may be processed if provided by the client for a defined purpose. This will be agreed in writing beforehand.
We typically receive data from schools or organisations we work with. However, in some cases we may collect data directly from students, staff, or whānau (e.g. through surveys). In these cases, the school or client is responsible for ensuring that informed consent is obtained before any data is collected.
4. Use of Cloud Storage and AI Tools
All data is stored securely in Google Drive, protected by two-factor authentication (2FA). On occasion, data may be downloaded to a local device temporarily for processing and is deleted immediately after upload to the secure cloud environment.
Where AI tools are used (e.g. for thematic analysis or automation), only fully anonymised data is used. No personally identifiable information is shared with AI systems.
5. Data Sharing and Reporting
Data InformEd does not share data with third parties without permission. Reports and data summaries are provided only to the commissioning client. We do not share information directly with students or whānau unless explicitly instructed in writing by the client organisation.
6. Data Retention and Deletion
We aim to remove access to data as soon as possible after project completion.
For smaller projects, this usually occurs immediately after delivery.
For larger projects, timelines are agreed in writing.
We do not retain data long-term unless specifically requested by the client.
Ownership of documents is transferred to the client at the end of the project, and Data InformEd’s access is removed.
7. Client Responsibilities
Clients are responsible for:
Ensuring appropriate consent is obtained from individuals (e.g. parents, staff)
Providing accurate and lawful data
Communicating with their communities about the use of external data support
Agreements are confirmed via email for small projects or with a signed Memorandum of Understanding (MoU) for larger work.
We are happy to support schools with good practice around data protection. This includes:
Sharing privacy documentation templates
Advising on safe storage and ethical use
Promoting positive, mana-enhancing data practices
If you believe personal information has been handled incorrectly, or if you wish to request access to or correction of your data, please contact us at the address below.
You have the right to lodge a complaint with the Office of the Privacy Commissioner if you feel your data rights have been breached.
Data InformEd
Email: bob.miller.education@gmail.com