Last updated: 19th May, 2026
Helix SMS is a cloud-based student management system designed specifically for New Zealand area and secondary schools. The platform is operated by Edge Learning Ltd and is accessible via the Helix SMS web platform and the Helix mobile app (available on iOS and Android).
In this policy, "Helix", "we", "us" and "our" refer to Edge Learning Ltd and the Helix SMS service. "You" refers to any individual who accesses or uses the Helix platform — including school staff, students, and caregivers.
We act as both a data controller (for information relating to our direct customers) and a data processor (for personal information provided to us by schools on behalf of their students and caregivers).
This Privacy Policy applies to:
This policy does not apply to third-party services integrated with Helix (such as payment providers or analytics platforms). We encourage you to review those providers' privacy policies separately.
Schools using Helix SMS are responsible for ensuring their own use of the platform complies with the NZ Privacy Act 2020 and any obligations they hold as data controllers in relation to their students and caregivers.
The information we collect depends on your role within the platform. We collect only what is necessary to deliver the features of Helix SMS.
Students: Full name, date of birth, year level, contact details, attendance records, academic results, assessment data, timetable, health and safety incidents, pastoral notes, and payment records where applicable.
Caregivers / Parents: Full name, relationship to student, contact details (email, phone), communication history, payment records, and login credentials.
Staff / Teachers: Full name, role, contact details, login credentials, timetable, class lists, attendance records submitted, communications sent, and pastoral notes recorded.
All Users (Technical): Device type, operating system, app version, IP address, session duration, and general usage patterns for the purpose of platform performance and security.
We do not collect biometric data, government-issued ID numbers, or sensitive financial information. Payment card data is handled directly by our payment processor.
We use the information collected to:
We do not use your information for advertising, profiling for commercial purposes, or sale to third parties.
We do not sell, rent, or trade personal information. We may share information only in the following circumstances:
Your school: All personal data entered into Helix is accessible to authorised staff at the school that manages the account. Schools are responsible for controlling staff access levels.
Service providers: We work with a small number of trusted third-party providers (such as cloud hosting, payment processing, and analytics) who are contractually bound to handle data securely and only as directed by us.
Legal obligations: We may disclose information where required to do so by law, court order, or to protect the safety of individuals in genuine emergencies.
Business transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred. We will notify affected users in advance where practicable.
We do not share student data with any advertising network, data broker, or third party for commercial purposes ever.
Helix SMS is a cloud-based platform. Your data is stored on secure servers and protected through a range of industry-standard technical and organisational measures, including:
While we take every reasonable precaution, no digital system is completely immune to risk. We encourage all users to keep their login credentials confidential and to contact us immediately if they suspect unauthorised access to their account.
Data is primarily stored and processed within New Zealand and/or Australia. Where any transfer outside of these jurisdictions is required, we ensure appropriate contractual safeguards are in place consistent with the NZ Privacy Act 2020.
Helix SMS is purpose-built for use in secondary schools. The platform routinely handles personal information relating to students who may be under the age of 18. We treat this data with the highest level of care and responsibility.
Student accounts and data are created and managed by schools, not by students directly. Schools are responsible for obtaining any necessary consents from parents or guardians in accordance with their obligations under the NZ Privacy Act 2020 and the Education and Training Act 2020.
Students using the Helix student portal or mobile app can view information relevant to their own schooling only. They cannot access other students' data.
We retain personal information for as long as necessary to fulfil the purposes described in this policy, or as required by law.
Active school accounts: Data is retained for the duration of the school's subscription with Helix SMS.
Following contract end: We retain data for a reasonable period (typically 12 months) to allow schools to export records, after which data is securely deleted unless retention is required by law.
Technical / log data: System logs and usage data are retained for up to 12 months for security and diagnostic purposes.
Legal obligations: Certain information may be required to be retained for longer periods under New Zealand law.
Schools may request the deletion of specific data at any time by contacting us directly, subject to any legal retention requirements.
Under the New Zealand Privacy Act 2020, individuals have the right to access and correct personal information held about them. Specifically, you have the right to:
For student and caregiver data, requests relating to school-held information should typically be directed to the relevant school in the first instance, as the school is the data controller for that information.
You may also lodge a complaint with the Office of the New Zealand Privacy Commissioner at privacy.org.nz if you believe we have not handled your information appropriately.
The Helix web platform uses cookies and similar technologies to maintain your session, remember your preferences, and ensure the platform operates correctly.
Session cookies: Required for login and secure access. These expire when you close your browser.
Preference cookies: Remember settings such as language or display preferences.
Analytics: We may use de-identified analytics tools to understand how the platform is used and where improvements can be made. No personally identifiable information is shared with analytics providers for external use.
The Helix mobile app stores minimal data locally on your device (such as cached session tokens and notification preferences) to enable offline functionality and fast access. This data does not leave your device except as part of normal platform communication with our servers.
We do not use tracking cookies for advertising purposes.
We may update this Privacy Policy from time to time to reflect changes in the platform, legal requirements, or our practices. When we make material changes, we will notify schools and users through the platform and/or by email in advance of the change taking effect.
We encourage you to review this policy periodically. The effective date at the top of this document indicates when it was last updated. Continued use of the Helix platform following notification of changes constitutes acceptance of the updated policy.
Prior versions of this policy are available upon request.
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal information, please get in touch:
Email: sales@helixsms.co.nzPhone: 0800 600 159 (Mon–Fri, 9:00am–5:00pm NZST)Website: www.helixsms.co.nz
We aim to respond to all privacy-related enquiries within 10 working days.
If your concern relates to information held by your school rather than by Helix SMS directly, we recommend contacting your school's administration in the first instance.
