Privacy policy for Campion Education

Introduction

This is the official privacy policy for Campion Education (Aust) Pty Ltd and its subsidiaries (“Campion,” “we,” “us,” “our”). It applies to all personal information we collect, including via campion.com.au and any related Campion website, social media page, or internal website (each a Website); any Campion mobile or tablet application (each an Application); and from an individual via any other means, including physically or electronically (together, the Collection Channels).

We are committed to protecting your privacy and handling your personal information securely and carefully. This policy explains how and why we collect, use, and disclose your information, and the controls you have over it. 

Specific Additional Provisions

Certain Collection Channels may have additional privacy or consent provisions. In case of inconsistencies, the specific and additional provisions will prevail. 

This policy is in addition to any other specific privacy provisions that may apply to certain services. For more information about the Privacy Act 1988 (Cth), please visit the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. 

The information that we collect

In the course of providing our products and services to you, we may gather certain types of information about the users of our websites and other channels. We will only collect personal information if it is necessary for one of our functions or activities. The two types of information we collect are: 

• Personally Identifiable Information This is information that can be used to reasonably identify you and is provided by you when you:
• register for services that we may offer via our websites;
• respond to our feedback surveys;
• establish an account with us or through one of our externally hosted applications;
• submit an after-purchase enquiry;
• call, email or fax or otherwise communicate with our customer service team;
• apply for employment with us

To run our business and provide you with products and digital resources, we only collect personal information that is essential. The specific details we gather depend on how you interact with us. Here’s a breakdown of the information we typically collect: 

For Digital Resource Access: 

• Full Name
• Email Address
• School and Year Level
• Student ID

For Product Orders and Delivery: 

• Full Name
• Email Address
• Delivery Address
• Contact Phone Number

2. Aggregated Data This information is generated by our systems as they track traffic through our sites. This information does not identify you personally and is not linked to the personally identifiable information that you may have provided.

Information that we collect from your use of our Websites and Applications

When you use a Website or Application, we may also collect information in the following general categories:

• Location information: if you permit a Website or Application to access location services through the permission system in your mobile device, we may collect the precise location of your device.
• Transaction information: we collect your transaction details when you place an order, including the products you have ordered, the date and time of your order and the amount charged.
• Usage and preferences: We collect information about how you interact with our Websites or Applications, including the pages you visit, your preferences and settings that you choose. We may do this through the use of cookies and other similar technologies that uniquely identify an internet service provider address or your account for example.
• Device information: We may collect information about your device such as the hardware model, operating system, preferred language, unique device identifier and mobile network.
• Other information: We may also collect and log information such as your IP address, access dates and times, browser type and pages visited when you interact with a Website or Application.

Information we collect from third parties

In addition to the information listed above, in some cases we may collect personal information about you from legitimate third party sources including social media sites and list brokers and other data providers that share data in circumstances where it is lawful and/or they have your permission to do so. This may include:

• When a third party has your consent to disclose your personal information to us, such as when you enter a competition or promotion administered by a third party on our behalf;
• When it is otherwise lawful for a third party to disclose your personal information to us, such as when we access purchasing information through our business partners or are provided data by a list broker.

Why do we collect your information?

We collect the information in order to provide the best possible service to you while you are visiting our stores and using our services, including our Websites. To this end we may use the information that you provide for the following purposes:

• to process any transactions that you might make including in our stores, by way of paper order forms, telephone orders or on our Websites including delivering your products to you;
• to make contact with you as the contact person for an educational institution that we deal with;
• to help to provide any other services that you have requested;
• to offer the most relevant information about our products and services suitable to you and your interests;
• for the purposes of collection of any debts owing to us;
• to provide customer support, including responding to your enquiries made via our Websites or otherwise;
• for any other purposes for which you have given permission;
• in order to review your application for employment and contact you regarding your application;
• for the purposes of obtaining professional advice in connection with the services provided to you;
• to comply with our legal obligations to law enforcement, regulators and the courts; and
• to offer additional products that may be relevant to your needs (to opt out of Campion promotional emails, you can click the ‘Unsubscribe’ link in a promotional email).
• To deliver and measure targeted advertising on third-party platforms.

Who we share this information with (Our Sub-processors) 

To provide our services, we may need to disclose your personal information to trusted third-party service providers (sub-processors). We take reasonable steps to ensure these providers are bound by strict confidentiality and privacy obligations. We will never sell your personal information. 

Below is a list of our key sub-processors, the services they provide, and the type of information they handle. 

Sub-processor	Purpose / Service Provided	Data Types Shared	Location of Processing	Privacy Policy
Australia Post	Order Fulfilment & Delivery	Customer Name, Delivery Address, Contact Number	Australia	https://auspost.com.au/privacy
Google	Website Analytics & Advertising	User Behaviour, Customer Personal (hashed email and phone number)	Global	https://support.google.com/analytics/answer/7318509?hl=en
Macquarie Telecom	Website & Data Hosting	Customer Personal	Australia	https://www.macquarietechnologygroup.com/privacy-policy/
Mastercard Payment Gateway Services (MPGS)	Secure Online Payment Processing	Transaction & Card Details, Name	Global	https://www.mastercard.com.au/en-au/vision/corp-responsibility/commitment-to-privacy/privacy.html
Meta	Advertising	User Behaviour, Customer Personal (hashed email and phone number)	Global	https://www.facebook.com/privacy/policy/
Microsoft Corporation	Website & Data Hosting    Website Analytics & Advertising	Customer Personal  User Behaviour	Australia	https://www.microsoft.com/en-au/trust-center/privacy
Zoho	Customer Support (Help Desk) & CRM	Customer Name, Contact Details, Enquiry Information	Global	https://www.zoho.com/privacy.html
Atlassian	Customer Support (Help Desk) & CRM	Customer Name, Contact Details, Enquiry Information	Australia	https://www.atlassian.com/legal/privacy-policy#privacy-policy-overview
Experian	Address validation	Address Information	Australia	https://www.experian.com.au/privacy-policy-terms-conditions
ClickSend	SMS service	Phone number	Australia	https://www.clicksend.com/au/legal/privacy-policy/#:~:text=We%20may%20use%20your%20Personal%20Information%20so%20that%20we%2C%20our,your%20feedback%20for%20promotional%20purposes.

Overseas Disclosure

While we are an Australian company and primarily use services that store data within Australia, some of our essential third-party service providers are based overseas or use global data centres. Specifically, providers such as Zoho (for customer support), Google (for analytics), and Mastercard (for payment processing) may process or store your personal information in countries outside Australia.

Anonymity and Pseudonymity

We will not collect or monitor your personal information without your express or implied consent.

Personal information is only collected for the purposes of establishing a relationship with our clients as well as providing and effectively marketing our goods and services to customers.

Use of cookies

A cookie is a small file that resides on your computer and is recognised by our server when you visit our sites. A cookie does not provide us with any personally identifiable information. It does provide details of your IP address, the computer platform that you use (e.g. Mac or Windows), the browser that you use (e.g. Chrome, Firefox, Safari, Opera, Internet Explorer), what domain you are accessing our site from, and visit duration.

We use Google Analytics to collect this data, which helps us track traffic patterns to our website, display the most relevant content, understand user behaviour on the website and therefore make informed decisions about optimising your user experience. You can find more information about Google Analytics and privacy here.

In addition to Google Analytics, we use tracking technologies from third-party advertising partners like Meta and Google. These technologies use cookies, web beacons, and other storage technologies to collect or receive information from our websites and elsewhere on the internet. This information is used to provide measurement services and to target ads.

A number of Google Analytics Advertising Features, such as Remarketing and Interest-based Advertising, may also be used from time to time on Campion websites. We and third-party vendors, including Google, use first-party and third-party cookies together to inform, optimise, and serve ads based on visits to our website.

In addition, third parties may place and read cookies on your browser, or use web beacons or similar technologies to collect information, including, where applicable, for the Google Trusted Stores program.

If you wish, you can prevent your data from being used by Google Analytics by using the Opt-out Browser Add-on. You can read more about managing cookies in your browser here.

Our advertisers and business partners

This Privacy Policy relates to all of our Websites. You should be aware that we are not responsible for the practices of our advertisers or business partners. Our sites may contain links to other sites. Check their privacy policies before providing personally identifiable information to them or any other third party.

Your payment information

Campion Education does not store your credit card details for online payments. Online transactions are processed directly through our secure payment gateway partner, Mastercard Payment Gateway Services (MPGS). We are provided with the last 4 digits of your credit card number and the payment status for reference purposes only. 

How we store this information

We take all reasonable steps to ensure all personal information stored is protected from misuse, interference and loss from unauthorised access. We hold personal information on secure databases on secure premises. Only authorised members of staff have access to this information. We will endeavour to ensure that any personal information transferred is only in an encrypted form and we monitor access to IT systems to mitigate the risk of any misuse of data.

If you have a personal password that enables you to access certain parts of our Websites or Applications, or other service we operate, do not forget your responsibility to keep this password secure and confidential.

We will destroy or de-identify personal information where it is no longer required for the purposes outlined in this policy, unless we are required or authorised by law to retain the information. We will only retain your personal information for as long as needed for the purposes we collected it, such as providing products and fulfilling transactions you have requested, or to meet legal and regulatory requirements.

We hold personal information on secure databases and use security procedures and technology, including: 

• Encryption, firewalls, and intrusion detection technology.
• Valid log-in protocols and password-based security.
• Regulated internal access to prevent misuse or unlawful disclosure.

Notifiable Data Breaches

Although unlikely, if we believe there has been an unauthorised access to, or loss of, any data stored by Campion, we will attempt to remedy the situation as soon as reasonably possible to prevent any serious harm or loss of information. However, following this remedial action, if we believe that there are still grounds to believe the unauthorised access or loss will result in serious harm to individuals to whom the information concerns, we will seek to notify those individuals.

Changes to this policy

In order to reflect the fact that our business is growing constantly, we reserve the right to change this policy at any time and our updated policy will be posted on our website. In the event the policy changes significantly we will notify you of the change via appropriate channels.

Accessing & correcting your information

The Privacy Act gives you the right to access and correct the information we hold.

To obtain access to your personal information you may be required to provide you must provide proof of identity, you must be reasonably specific about the information you seek to access and we may charge you a reasonable administration fee which accurately reflects the cost of providing the access in accordance with your request.

Opting out of targeted advertising: If you do not want us to use your personal information for targeted advertising on platforms like Facebook and Google, you can opt-out by contacting us at privacyofficer@campion.com.au. Please note that you may still see general ads from us, but they will not be based on your personal information. You can also manage your advertising preferences directly within these third-party platforms:

Facebook Ad Settings: https://www.facebook.com/ads/preferences/

Google Ad Settings: https://adssettings.google.com/

To opt out of Campion promotional emails, you can click the ‘Unsubscribe’ link in a promotional email.

If you do not want to receive any communication from us or would like to amend, update or access your personal information you can do so by contacting us via privacyofficer@campion.com.au or by post to:

Campion Education Privacy Officer

Unit 1, 170-180 Rooks Road

Nunawading VIC 3131.

We will do all that we can to assist you, however if you are not satisfied with our response you may then take your complaint to the Office of the Australian Information Commissioner (http://www.oaic.gov.au).

Last updated: November 2025