Campion Education uses the following third-party services to deliver its ordering, digital resource and support services, which process personal information. We update this page at least 30 days in advance of changes coming into effect, including any change to the country where data is stored or to the people who can access it. You can subscribe to updates on this page and our privacy policy using the form below. 

Security and privacy 

We assess service providers in relation to cybersecurity, privacy, contractual protections and the nature of the information they process. For providers that process student or customer personal information, we require written agreements containing confidentiality obligations and other measures to ensure the security and protection of data, including controls on cross-border transfers of information. 

We host our core ordering and student platforms in Australia, and we host information in Australia where possible. Where a service provider cannot host in Australia, we preference legal jurisdictions with strong privacy laws such as the United Kingdom, the European Union and New Zealand. 

Campion operated platforms 

The following platforms are operated by Campion and hosted in Australia. They are not third parties and are listed here only so the integration column below is clear about which system each provider connects to. 

Platform	Role	Hosting country
ECO	Core ordering and student database platform; receives school data imports and parent and student registrations	Australia
Secure Connect	Secure school data import channel from school student information systems	Australia
MyConnect2	Digital resource access and single sign on to publisher platforms	Australia
Campion IAM	Identity and sign on service for Campion platforms	Australia
Student Ordering and Web4POS	Online and in-store ordering and point of sale	Australia
Campion Bookshop	Direct to consumer online shop	Australia
Payment Gateway Wrapper	Campion service passing card payments to the payment gateway; full card numbers are not stored in Campion ordering systems	Australia
Bookmaster	Finance and order system of record	Australia

List of processors and third parties 

Hosting and infrastructure 

Provider and contact	Purpose and data types disclosed	Integration with Campion systems	Data location
Microsoft Azure  azure.microsoft.com	Hosting of Campion-operated services. Data categories: Student PII; Teacher/School Staff PII; Customer PII; School Representative PII; Account and Entitlement Data; Order and Transaction Data; Support Content; Technical, Security and Usage Data.	Directly hosts Campion-operated web platforms.	Australia
Macquarie Telecom  macquarietelecom.com	Managed hosting and infrastructure services for the Azure environment.	Manages the Azure environment above.	Australia
Evolution Systems (Iptor)  evolutionsystems.com.au	Bookmaster hosting, backup and support. Data categories: Customer PII; limited Student PII associated with orders; School Account and Finance Data; Order and Transaction Data; Payment References; Support, Audit and Technical Data.	Hosts and supports Bookmaster.	Australia (Sydney; backups Brisbane)
Aspire Web  aspireweb.com.au	Management and support of the public corporate website. Enquiry and form content; website usage data.	Manages the public website on Campion’s behalf. Nothing is held by the managing party beyond the website itself.	Australia
Word Press  wordpress.com	Content management and hosting platform for the main corporate website, managed for Campion by Aspire Web. Website usage data, comments and form submissions.	The platform on which the public website runs; not integrated with the ordering platforms.	Global (United States, European Union)
Microsoft 365  microsoft.com	Email and productivity suite used by Campion staff. Correspondence and business records, which can include personal information.	Standalone corporate service; not integrated with the ordering platforms.	Australia, with provider support access from other countries

School data integration 

Provider and contact	Purpose and data types disclosed	Integration with Campion systems	Data location
Wonde  wonde.com	School data integration service used by some schools to provide student data, including future student and support teacher data, to Campion. Student identity and school details as configured by the school.	Directly integrated with Secure Connect and ECO as an import connector, under the school’s control.	Australia
School student information systems (TASS, Synergetic, Sentral, Edval, Veracross and others)  operated by or for each school	Sources of the student data each school chooses to provide for its resource program. These providers act for the school, not for Campion.	Directly integrated with Secure Connect through school-controlled connectors; some schools use file upload instead.	Per each school’s arrangement
Compass compass.education	School data integration service used by some schools to provide student data, including future student and support teacher data, to Campion. Student identity and school details as configured by the school.	Directly integrated with Secure Connect and ECO as an import connector, under the school’s control.	Australia

Educational publishers 

Campion supplies digital resources from a large and changing range of educational publishers. Not every publisher receives personal information. Personal information is disclosed only where a particular digital resource has been purchased, subscribed to, trialled or otherwise provisioned, and the relevant publisher requires information to provide or support access to that resource. 

Where disclosure is necessary, Campion limits the information provided to the categories reasonably required for the relevant product and purpose. These may include: 

 

• Student PII; 

• Teacher or School Staff PII; 

• School, Class and Year-Level Data; 

• Product, Licence and Entitlement Data; 

• Account and Single Sign-On Data; 

• Resource Access and Usage Data; and 

• Support Information. 

Campion does not provide publishers with general student lists merely because information is available. A publisher receives information only in connection with the digital resource it supplies and only to the extent reasonably necessary to provision, administer, maintain or support that resource. 

The method of disclosure varies according to the publisher and product and may include: 

• secure API integration; 

• single sign-on; 

• secure file transfer; 

• controlled spreadsheet or licence report; or 

• another approved provisioning process. 

Some publishers store or process information in Australia. Other publishers may store, process, back up or permit authorised support access to information from overseas. Processing locations vary by publisher, product and supporting service provider. Campion maintains internal publisher and overseas-holdings registers recording the relevant publishers, data categories, disclosure methods and known processing locations. 

Where practicable, Campion identifies in its Privacy Policy the countries in which overseas recipients are likely to be located. Campion also applies any stronger Australian data-residency requirement contained in an applicable school agreement or product order. 

Education products 

These products are distributed or supported by Campion for school customers through the CuratED portfolio or other school-subscription arrangements. Depending on the product and school configuration, authorised users may include school administrators, teachers, support staff and students. The exact fields, purposes, product operator, integration method, retention period, hosting and access locations must be stated for each product. “Standard field set” is a maximum description, not authority to disclose every listed field for every product. 

Provider and contact	Purpose and data types disclosed	Integration with Campion systems	Data location
MusicEDU (platform managed by Avallain AG)  musicedu.com.au	Provisioning of purchased digital resources to the student they were bought for. Standard field set above.	Not directly integrated. Provisioned by email with an attachment to the platform manager.	Switzerland and Austria
Rising Software  risingsoftware.com	Provisioning of purchased digital resources. Standard field set above.	Not directly integrated. Provisioned by secure spreadsheet transfer rather than the API.	Australia for Australian and New Zealand student/user data
Campion Write (Olex.AI, operated by School Reviewer Limited)  au.olex.ai	AI-assisted feedback on student writing. Student account details per the standard field set and English class data; student written work, anonymised before AI processing. Model training limited to irreversibly de-identified, aggregated data.	Provisioned through Campion SSO and Secure Connect.	Australia (hosted); support access from the United Kingdom and Slovenia
Lessonate (Campion)  campion.com.au	Campion’s own AI teaching resource product. Student name, school email and school where the school configuration requires it; chat logs. No external third parties receive or process the data; only de-identified or aggregated data is used for model improvement.	Provisioned from Campion systems (ECO, IAM, MyConnect2). Campion operated.	Australia
Acrux Mark (Teacher Holdings)  go.acrux.education	AI-assisted maths assessment marking, under product review and not yet live for Campion schools. Once live: student name, email, school, class, student work and results, and scanned assessment papers, with deletion 90 days after subscription end.	Provisioned from Campion systems.	Australia
LearnCoach  learncoach.com	Online study platform for senior students. Standard field set.	Provisioned from Campion systems.	Australia
Play Fearless  we.playfearless.com	Performance mindset platform. Standard field set (name, school email, school).	Integration built and ready for testing; not yet in use.	Australia
Riypl  ripyl.net	A teacher membership platform designed to support business and commerce teachers with ready-to-use, real-world classroom activities.   Ripyl helps teachers save planning time while giving students opportunities to apply business concepts through practical, engaging scenarios based on real brands and businesses.	Provisioned from Campion systems.	New Zealand
FoodTech Gurus  foodtechgurus.com.au	Platform for Teachers and Students with the most creative and advanced way to Teach and Study Food Technology.	Provisioned from Campion systems.	Australia
FoodEd Assist  foodstudies.com.au	An interdisciplinary platform that examines the role of food in society, culture, health, economics, politics, history, and the environment. Rather than focusing only on cooking or nutrition, it looks at the entire food system, including how food is produced, distributed, marketed, consumed, and regulated.	Provisioned from Campion systems.	United States
BioBrain  biobrain.com.au	A curriculum-aligned digital science learning platform for secondary school students and teachers, covering Biology, Chemistry, Physics, and Year 10 Science across IB DP, VCE, and SACE.	Provisioned from Campion systems.	Australia
Code Avengers  codeavengers.com/	Code Avengers supports schools with engaging, curriculum-aligned lessons, real-world skills, and teacher resources – designed to fit into any classroom or subject area, for learners aged 5–18+	Provisioned from Campion systems.	United States

Payments and delivery 

Provider and contact	Purpose and data types disclosed	Integration with Campion systems	Data location
Mastercard Payment Gateway Services (MPGS)  mastercard.com	Card payment processing for online and point of sale payments, including payment screening. Cardholder name, card details entered at payment, transaction records. Campion ordering systems retain a payment reference and result, not full card numbers.	Directly integrated through the Payment Gateway Wrapper and point of sale terminals.	Global (United States, European Union, Singapore)
PayPal/ Braintree  paypal.com	Payment option where offered. Payer identity and transaction records, held under PayPal’s own policy.	Directly integrated as a payment channel where offered.	United States and global
Australia Post and StarTrack  auspost.com.au	Delivery of orders. Recipient name, delivery address, email and phone for delivery notifications.	Directly integrated with Campion’s logistics and manifesting systems.	Australia
Experian  experian.com.au	Data categories: Customer Address Data; Address Validation Query and Response Data; Request, Device or IP Metadata where generated.	Directly integrated with the ordering platforms as a validation service.	Australia

Customer communications and support 

Provider and contact	Purpose and data types disclosed	Integration with Campion systems	Data location
Campaign Monitor  campaignmonitor.com	Email marketing and service communications to customers. Name, email address, campaign list and suppression records.	Directly integrated with Campion’s marketing processes.	United States
ClickSend  clicksend.com	SMS delivery, including account verification codes and service and marketing messages. Mobile number and message content.	Directly integrated with Student Ordering for verification codes and with marketing processes for campaigns.	Australia
Genesys  genesys.com	Contact centre platform for customer support calls. Caller phone number, name and profile details displayed to agents, interaction records.	Directly integrated: displays parent profile, linked students and schools, and recent orders from Campion systems during a call.	Australia
Zoho (Desk, Forms, Flow, Assist and WorkDrive)  zoho.com	Support ticketing, customer feedback forms, workflow automation, remote support and file collaboration. Contact details, enquiry and ticket content, order references, feedback and refund request content, support session information and files shared through WorkDrive.	Directly integrated with Campion systems: Zoho Desk displays parent profile, linked students and schools, and recent orders during support interactions, in the same manner as Genesys. Zoho Forms, Flow, Assist and WorkDrive are used as related support tools, primarily during peak season.	Australia
SurveyMonkey  surveymonkey.com	School and parent surveys. Respondent contact details and survey responses.	Not directly integrated; standalone survey tool.	United States
Google (Analytics and Tag Manager)  analytics.google.com	Website analytics and campaign measurement on customer facing sites. User behaviour, online identifiers, IP address and device data; hashed customer email and phone for advertising audiences. Not used on student information and not used to advertise to students.	Directly integrated as website tags on customer facing sites.	Global (United States, European Union, Asia-Pacific)
Meta  facebook.com	Advertising and audience measurement through the Meta pixel and Facebook Ads. User behaviour and online identifiers; hashed customer email and phone for custom audiences. Not used on student information and not used to advertise to students.	Directly integrated as a website tag on customer facing sites.	Global (United States, European Union)

Workforce and corporate services 

Provider and contact	Purpose and data types disclosed	Integration with Campion systems	Data location
ADP (Payforce)  adp.com	Payroll and workforce processing; employee identity, TFN, banking, superannuation and pay records.	Current Payforce processes.	United States
UKG (Kronos)  ukg.com	Time and attendance. Work hours, shifts, leave; staged import files include TFN and date of birth.	Not directly integrated; data moves by staged file import.	Global
ELMO  elmosoftware.com.au	Training and induction platform. Employee training and completion records; onboarding data.	Standalone.	Australia
JotForm  jotform.com	Forms platform for recruitment applications, employment forms, emergency contacts, incident reporting and timesheets, and escalation of in-store customer enquiries. Candidate and employee identity, TFN, bank and superannuation details, emergency contacts, medical condition information, incident details; customer enquiry content.	Standalone forms; some outputs are emailed.	Australia
Seek  seek.com.au	Recruitment applications and CVs.	Standalone.	Australia
Atlassian Jira and Confluence  atlassian.com	Internal ticketing and documentation; ticket content may contain personal information.	Integrated with ECO for release notes; otherwise, internal operational tooling.	Australia

Notifications and updates 

For updates to this sub-processor list and our privacy policy, please register using your email address. We publish changes to this page at least 30 days before they come into effect, including the addition of a provider, a change in the data disclosed, or a change in the country where data is stored or the locations from which it can be accessed. Subscribing to these updates is separate to any Campion marketing communications.