Sub-Processors

Overview of Sub-Processors

Trust & Safety Resources

This ePlatform Sub-Processors Page is incorporated into the DPA and Online Services Agreement. This page explains how ePlatform engages with Sub-Processors.

ePlatform engages carefully selected third-party service providers (“sub-processors”) to support the delivery of its services. Each sub-processor processes limited categories of personal data strictly for defined business purposes (e.g., cloud hosting, email communications). The lawful basis for engaging these sub-processors is assessed in line with applicable privacy laws, including the Australian Privacy Act 1988 and, where relevant, the GDPR.

The lawful bases fall into three categories:

• Performance of a contract – where the processing is necessary to deliver our services to customers and end users.
• Legitimate interests – where processing supports essential business operations such as secure hosting, system monitoring, and communication infrastructure, provided these interests are balanced with the rights of individuals.
• Consent – where individuals have provided clear permission, such as for receiving marketing communications. All sub-processors are contractually bound to implement appropriate technical and organisational measures to protect personal data, and processing is limited to the minimum scope required to fulfil their defined purpose.

From the school we collect and process:
School name, School address, Country, Contact details (phone, address, email), Notes regarding our communications with the school.

For admin users we may collect
Administrator name/s, Email address, Job Title, Phone numbers

For students we may collect
Student name/s, Email address, Year-level

Sub-Processor List

Name of Organisation: Microsoft Azure
Contact information: URL https://azure.microsoft.com/
Purpose and Types of data: Primary cloud hosting service for critical infrastructure and databases. Customer Personal Data, created by customer and stored in Applicable Cloud Products
Lawful basis: Performance of a contract; Legitimate interests in providing secure and reliable infrastructure.
Countries where data may be processed or stored: Australia.

Name of Organisation: Google
Contact information: URL https://support.google.com/
Purpose and Types of data: File storage and email communications. Location USA. Contact details
Lawful basis: Performance of a contract; Legitimate interests in facilitating business operations and communications.
Countries where data may be processed or stored: Australia and USA

Name of Organisation: Google Analytics
Contact information: URL https://support.google.com/
Purpose and Types of data: Website and app usage data.
Lawful basis: Legitimate interests in facilitating business operations.
Countries where data may be processed or stored: USA

Name of Organisation: Active Campaign
Contact information: URL https://www.activecampaign.com/contact
Purpose and Types of data: Email communications to Customers and Prospects.
Lawful basis: Consent (for marketing communications to prospects); Performance of a contract and legitimate interests (for communications with existing customers).
Countries where data may be processed or stored: USA

Name of Organisation: Twilio
Contact information: URL https://www.Twilio.com
Purpose and Types of data: Used as a communication service which allows interaction and communications between customers and ePlatform.
Lawful basis: Performance of a contract; Legitimate interests in ensuring reliable customer communications.
Countries where data may be processed or stored: USA

Name of Organisation: Zendesk
Contact information: URL https://www.zendesk.com/au/trust-center/
Purpose and Types of data: Customer service and technical support
Lawful basis: Performance of a contract; Legitimate interests in ensuring reliable customer communications.
Countries where data may be processed or stored: USA

ePlatform Affiliates

To help ePlatform deliver the Our Service, we engage ePlatform Affiliates as Sub-Processors to assist with our data processing activities. By agreeing to the DPA, you agree all of these Sub-Processors may have access to Customer Data.

ePlatform Malaysia
Services & Support Location: Malaysia.

ePlatform New Zealand
Services & Support Location: New Zealand.

ePlatform Australia
Services & Support Location: Australia.