Effective Date: 7 January 2026

Mathematics.com.au Pty Ltd (MathsOnline) uses third-party service providers (sub-processors) to assist in delivering our services. This page lists all sub-processors who may access, process, or store user data.

All sub-processors are required to handle personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles.


Infrastructure & Hosting

Amazon Web Services (AWS)

Organisation: Amazon Web Services, Inc. (managed by AC3)
Website: https://aws.amazon.com
Contact: https://aws.amazon.com/contact-us
Purpose: Cloud infrastructure hosting and data storage
Data Types: All user data (names, email addresses, grades, educational content)
Lawful Basis: Necessary for service delivery
Data Location: Australia (primary storage)
Note: AWS infrastructure is fully managed by Australian Centre for Advanced Computing and Communication Pty Ltd (AC3) - https://www.ac3.com.au


Payment Processing

Stripe

Organisation: Stripe, Inc.
Website: https://stripe.com
Contact: https://support.stripe.com
Purpose: Payment processing for subscriptions
Data Types: Payment card information, billing addresses, transaction records
Lawful Basis: Necessary for contract fulfilment
Data Location: United States, Europe

eWAY

Organisation: eWAY Payment Gateway
Website: https://www.eway.com.au
Contact: support@eway.com.au
Purpose: Payment processing for subscriptions
Data Types: Payment card information, billing addresses, transaction records
Lawful Basis: Necessary for contract fulfilment
Data Location: Australia


Customer Relationship Management

HubSpot

Organisation: HubSpot, Inc.
Website: https://www.hubspot.com
Contact: https://www.hubspot.com/contact
Purpose: Customer relationship management, email marketing campaigns
Data Types: Names, email addresses, account information, communication preferences
Lawful Basis: Necessary for service delivery and marketing (with consent)
Data Location: United States

Keap (formerly Infusionsoft)

Organisation: Keap (Infusion Software, Inc.)
Website: https://keap.com
Contact: https://keap.com/contact
Purpose: Customer relationship management, marketing automation
Data Types: Names, email addresses, account information, communication preferences
Lawful Basis: Necessary for service delivery and marketing (with consent)
Data Location: United States


Email Delivery

Mailgun

Organisation: Mailgun Technologies, Inc. (Sinch)
Website: https://www.mailgun.com
Contact: https://www.mailgun.com/contact
Purpose: Transactional email delivery (system notifications, password resets)
Data Types: Email addresses, email content
Lawful Basis: Necessary for service delivery
Data Location: United States


Application Services

Typesense

Organisation: Typesense, Inc.
Website: https://typesense.org
Contact: https://typesense.org/support
Purpose: Search functionality within the application
Data Types: Indexed educational content, search queries
Lawful Basis: Necessary for service delivery
Data Location: United States (Typesense Cloud)

New Relic

Organisation: New Relic, Inc.
Website: https://newrelic.com
Contact: https://support.newrelic.com
Purpose: Application performance monitoring and error tracking
Data Types: Technical logs, performance metrics, anonymised user sessions
Lawful Basis: Legitimate interest in maintaining service quality
Data Location: United States


Cookie Consent Management

Cookie-Script

Organisation: Cookie-Script.com
Website: https://cookie-script.com
Contact: https://cookie-script.com/contact
Purpose: Cookie consent banner and consent preference management
Data Types: IP addresses, consent preferences, browser information, cookie settings
Lawful Basis: Legal obligation to obtain and record cookie consent
Data Location: Europe (Ireland)


Analytics

Google Analytics

Organisation: Google LLC
Website: https://analytics.google.com
Contact: https://support.google.com/analytics
Purpose: Website usage analytics and reporting
Data Types: IP addresses, browser information, page views, anonymised usage patterns
Lawful Basis: Legitimate interest in improving service quality
Data Location: United States, Europe

Hotjar

Organisation: Hotjar Ltd.
Website: https://www.hotjar.com
Contact: https://help.hotjar.com
Purpose: Website analytics, heatmaps, user behaviour analysis
Data Types: IP addresses (anonymised), browser information, page interactions, session recordings
Lawful Basis: Legitimate interest in improving user experience
Data Location: Europe (Ireland), United States


Content Delivery & Web Services

Bootstrap CDN / Cloudflare CDN

Organisation: MaxCDN/StackPath, Cloudflare, Inc.
Websites: https://www.bootstrapcdn.com, https://www.cloudflare.com
Contact: https://support.cloudflare.com
Purpose: Delivery of public JavaScript libraries and web assets
Data Types: IP addresses (for content delivery only), no user account data
Lawful Basis: Legitimate interest in website performance
Data Location: Global CDN infrastructure

Google APIs

Organisation: Google LLC
Website: https://developers.google.com
Contact: https://support.google.com
Purpose: Delivery of web fonts and jQuery library
Data Types: IP addresses (for content delivery only), no user account data
Lawful Basis: Legitimate interest in website performance
Data Location: United States, Europe


Changes to Sub-Processors

We may add, remove, or change sub-processors from time to time. When we make material changes, we will update this page and note the date of the update.

For questions about our sub-processors, please contact us at privacy@mathsonline.com.au