| Sub-Processor | Organisation | Contact Information | Purpose of Processing | Categories of Personal Data | Lawful Basis | Countries Where Data May Be Processed or Stored |
|---|---|---|---|---|---|---|
| Amazon Web Services (AWS) | Amazon Web Services, Inc. |
https://aws.amazon.com https://aws.amazon.com/privacy |
File storage, backups, content delivery and application services. | Uploaded files and educational content. | Performance of a contract; Legitimate interests. | Australia, United States and other AWS regions used by the service. |
| Laravel Cloud | Laravel Holdings Inc. |
https://cloud.laravel.com https://laravel.com/cloud/legal/privacy |
Application hosting and managed platform services. | User account information, application data, logs, metadata and backups. | Performance of a contract; Legitimate interests. | Australia and other regions selected by the service provider. |
| Cloudflare | Cloudflare, Inc. |
https://www.cloudflare.com https://www.cloudflare.com/privacypolicy |
DNS, content delivery network (CDN), DDoS protection, web application firewall and security services. | IP addresses, browser information, device identifiers, request metadata and logs. | Legitimate interests (security and service delivery). | Australia, United States and other locations within Cloudflare's network. |
| Square | Square AU Pty Ltd |
https://squareup.com https://squareup.com/au/en/legal/general/privacy |
Payment processing, subscription management and fraud prevention. | Customer name, email address, billing information, payment method details and transaction records. | Performance of a contract; Legal obligation; Legitimate interests (fraud prevention). | Australia |
| My AskAI | My AskAI |
https://myaskai.com https://myaskai.com/privacy |
AI-powered educational assistance and response generation. | User prompts and content voluntarily submitted through AI-powered features. | Legitimate interests; Performance of a contract. | United States |
| PostHog | PostHog, Inc. |
https://posthog.com https://posthog.com/privacy |
Product analytics, usage monitoring, feature flagging, performance monitoring and service improvement. | User account identifiers, IP addresses, device information, browser information, page views, user actions, feature usage, and technical diagnostic data. | Legitimate interests (service improvement, analytics and security); Consent where required by applicable law. | United States |
| Postmark | ActiveCampaign, LLC (Postmark) |
https://postmarkapp.com https://postmarkapp.com/privacy-policy |
Transactional email delivery, including account notifications, password resets, verification emails and service communications. | Name, email address, email content, message metadata, delivery status information and technical logs. | Performance of a contract; Legitimate interests (reliable service communications). | United States |
| Zendesk | Zendesk, Inc. |
https://www.zendesk.com https://www.zendesk.com/company/privacy-and-data-protection |
Customer support and help desk services, including management of support requests and customer communications. | Name, email address, account information, support ticket content, communications, attachments and technical metadata. | Performance of a contract; Legitimate interests (customer support and issue resolution). | Australia, United States, European Union and other locations used by Zendesk to provide support services. |
| Klaviyo | Klaviyo, Inc. |
https://www.klaviyo.com https://www.klaviyo.com/legal/privacy-policy |
Email marketing, customer engagement, audience segmentation, campaign management and communication analytics. | Name, email address, subscription preferences, engagement data (such as email opens and clicks), account information, marketing consent records and related analytics data. | Consent (for marketing communications where required); Legitimate interests (customer engagement and service improvement). | United States, European Union and other locations used by Klaviyo to provide its services. |