Data Processing Summary

The school decides what information goes into Bell Path and what it is used for. Bell Path processes that information to provide the service, support the school, keep the platform secure and meet its legal obligations.

Bell Path does not need student names to build a timetable. If a school chooses to enter student-related or student-identifying information into Education Support, planning, notes or any other feature, the school remains responsible for authority, notices, consents, keeping the information to what is needed, deciding how long to keep it, and meeting its own legal and policy obligations.

An assigned CRT can open the non-sensitive day outline from the random booking link issued for that assignment without a Bell Path account or verification code. Class handovers, student support instructions, restricted files and School access vault values remain protected until one possession check passes: the first open of the booking text Bell Path sent to the assigned CRT’s stored mobile number within the last twelve hours, or a six-digit code sent to that number, with verified school email as a fallback.

A teacher without a Bell Path account can use an expiring contribution link limited to the date, class or session they own. It does not open the wider school workspace.

The separate resource shelf code opens only the lesson resources already attached to that CRT brief. It does not open student support instructions or School access vault values.

Before relying on Bell Path for live school data, a school should check it against its own requirements: sector rules, purchasing rules, any privacy impact assessment it must do, security reviews such as ST4S (Safer Technologies 4 Schools), data residency needs and local policy.

Bell Path is specialist timetabling and planning software. It does not replace the administration, identity, email, finance or learning systems your Department provides.

Any special commitment on data residency, providers, certification, a security questionnaire, service levels or deletion must be agreed in writing before the school relies on it.

Bell Path uses other companies only where they are reasonably needed to run, support, secure, monitor or bill for the service.

Bell Path is an Australian business run from Victoria, and its servers are in Australia: the website you sign in to, database holding your school information, timetable generator and virus scanning of those files run in Melbourne, and the files staff upload for a CRT and database backups are stored in Sydney.

Bell Path moved its servers to Australia on 22 September 2026. A copy of the database and of files staff uploaded is still held by Railway in Singapore, kept deliberately so the move could be reversed without losing anything a school had entered. It is being deleted once the move has settled, and this page will say so when it is gone. Email, SMS, payments and the optional AI features come from separate companies, so Australian servers on their own do not make every part of the service Australian. The companies Bell Path relies on are named in this pack.

Other providers may process limited information in the United States, Australia, Singapore or other regions they use. A commitment to a specific region must be agreed in writing before it is relied on.

Schools with data residency concerns should read and print the Bell Path risk assessment before entering live data.

Platform administration is limited to authorised Bell Path staff. When they open a sensitive area, we record who did it, what they did, which page, which school or user it concerned, and when.

Each school also has its own audit trail for sensitive actions: exports, timetable publishing and unpublishing, changes to members, account deletion, and selected operations calendar changes.

Visitors can ask Bell Path for a single reminder when timetabling season comes around. For this we store the email address entered, the chosen reminder time and the page the request came from, and we use it only to send that one reminder.

Because the form does not need an account, we confirm the address first: a plain confirmation email goes out, and the reminder is set only when the person clicks the link in it. Every reminder email has a cancel link. Confirming or cancelling affects that reminder only and never changes any account, billing or support email.

These records are deleted automatically: an unconfirmed reminder 7 days after the request, and a sent or cancelled reminder 30 days after it was sent or cancelled.

Schools can ask for an export, deletion or account help by emailing hello@bellpath.com.au. We may keep some records where the law, accounting, security, backups, audit or a dispute requires it.