With respect to data sovereignty Box of Books is an Australian private company and subject to Australian Federal and State laws. Box of Books platform servers and databases are housed in the AWS Sydney "point of presence", split across multiple data centres in NSW.
Box of Books offers several standards compliant, authentication end-points for schools including SAML, Google oAuth and Azure/Office 365 oAuth. Our approach is designed to remove the need for BoB platform to hold authentication data (for example passwords) on behalf of the user.
We're keen privacy advocates, and as a rule aggregate only the data we need about users to provide the best possible service.
HOW AND WHY WE COLLECT PERSONAL INFORMATION
Box of Books needs to collect personal information in order to conduct its business. Our policy is only to use personal information collected from our business contacts or the users of our websites for the business purpose for which it was collected, and not for any other purpose. We do not collect personal information that we do not need.
WILL YOUR PERSONAL INFORMATION BE GIVEN TO ANYONE ELSE?
We will not sell, rent or trade personal information about you to or with others. Personal information collected by us may be disclosed to third parties to whom we outsource specialised functions (such as digital rights management, mailing houses or printing companies). The only other time we would make disclosures of personal information is if we are required to do so by law, or if the disclosure is permitted under the Privacy Act.
HOW IS YOUR PERSONAL INFORMATION STORED?
Box of Books takes steps to ensure that the personal information it holds is secure from unauthorised access, destruction, use, modification or disclosure. We only permit your details to be accessed by authorised personnel.
Our digitally rights managed books are secured in partnership with Adobe. Adobe needs to collect specific information about our customers as part of its process to deliver rights managed books. Adobe’s data collection and privacy policies for their Rights Management Software Development Kit (RMSDK) are available online:
YOUR RIGHT OF ACCESS AND CORRECTION
Under the Privacy Act, you have the right to seek access to information which we hold about you (although there are some exceptions to this). You also have the right to ask us to correct information about you which is inaccurate, incomplete or out of date.
ADDITIONAL PRIVACY INFORMATION & HOW TO CONTACT US
For further information about privacy issues, see the Australian Federal Privacy Commissioner's website at www.privacy.gov.au.