Use of Sub-Processors

To provide our services effectively, we may engage third-party sub-processors to handle specific functions such as hosting, payment processing, and government-mandated reporting. These sub-processors are carefully selected to ensure compliance with data protection laws and security standards. Below is a list of key sub-processors we work with, including the types of data processed, the purpose of processing, and the locations where data may be stored or processed.

Sub-Processor

Organisation

Contact Information

Data Types & Purpose

Lawful Basis

Data Storage/Processing Locations

Microsoft Azure

Microsoft Corporation

https://azure.microsoft.com/

Hosting of application data, including personal data required for service delivery.

Contractual necessity

Australia

AWS (Amazon Web Services)

Amazon Web Services, Inc.

https://aws.amazon.com/

Hosting of application data, including personal data required for service delivery.

Contractual necessity

Australia

Ezypay

Ezypay Pty Ltd

https://www.ezypay.com/

Payment processing, including transaction and billing data.

Contractual necessity

Australia

Paystation

Windcave Limited

https://www.paystation.co.nz/

Payment processing, including transaction and billing data.

Contractual necessity

New Zealand

POLi Payments

MERCO Limited

https://www.polipay.co.nz/

Payment processing, including transaction and billing data.

Contractual necessity

New Zealand

Google Cloud

Google LLC

https://cloud.google.com/

Hosting of data, including analytics and system performance monitoring.

Legitimate interest

Australia

NZQA (New Zealand Qualifications Authority)

NZQA

https://www.nzqa.govt.nz/

Student qualification data for regulatory reporting.

Legal obligation

New Zealand

Ministry of Education (MoE NZ & Australia)

Ministry of Education

https://www.education.govt.nz/

Student and school-related data for compliance and funding purposes.

Legal obligation

New Zealand, Australia