About this Privacy Policy

We understand and appreciate that privacy is a major concern for individuals who trust us with their personal and sensitive information, as it is for us. 

This policy details our commitment to the responsible and transparent use of private information. We commit to collecting, using, storing and disclosing this information in a lawful and responsible way. 

Please read this policy carefully to understand how we will treat your personal information.  It describes what you can do if you have any concerns or complaints about the way we collect or process personal information. 

We will act in accordance with the Commonwealth Privacy Act, the New Zealand Privacy Act and, to the extent it is relevant, the General Data Protection Regulation (GDPR) 2016/679 that stipulate how organisations should manage the collection, use and disclosure of personal information.

GDPR applies to Cengage Australia as Cengage have offices in the European Union. When processing your personal information, our lawful basis is:

• Legitimate interest to fulfil any contractual agreements between you and us if you are an existing or prospective customer
• Consent obtained prior to promoting our services to you

What kinds of information do we collect?

The Personal Information we collect is for the purposes of administering the terms of your service/s and conducting business transactions with you. This information includes (but is not limited to)

How do we collect personal information?

We may collect information directly from you, from a third party, from our website or from your IP address.

A special note about children

We collect information about children in order to deliver a product or service. We do not market to children. Parents must consent to the collection and use of personal information for any child under the age of 18.

How do we protect personal information?

We are committed to protecting the security of your personal information and we take all reasonable precautions to protect it from unauthorised access, modification or disclosure. We will also take all reasonable steps to ensure vendors comply with secure handling of your personal information.

We employ website encryption on pages that contain personal information and encrypt personal data at rest.

We encourage the use of complex passwords (incorporating upper and lower case letters, at least eight characters, at least one special character and at least one number) to secure user accounts. 

Notification of data breach

In accordance with obligations under relevant data protection laws, we will inform the competent regulatory authority and affected individuals without undue delay in the event of a personal information data breach.  We will provide all relevant information relating to the data breach as part of our notification. We will use reasonable endeavours to assist you in mitigating the adverse effects of any data breach.

How do we disclose personal information?

We may disclose personal information to provide services to you (for example, we outsource mailing to a courier and will provide your personal information accordingly when you purchase material from us to send that material to you) and to advise you about our new or existing services.

We engage with third party applications including, but not limited to, ServiceNow, Google Analytics, Dynatrace and Splunk to provide customer support, website usage information, application performance and security monitoring functions. Some of these applications may contain personal information.

We may also disclose personal information when required by law.

Do we transfer personal information to overseas recipients?

We may transfer personal information to the United States, as necessary to provide services. In this instance we have standard contractual data protection clauses in place to protect your data.

Opting out

You may elect not to receive future communications by completing the form at https://cengage.com.au/unsubscribe

Rights of individuals

Important Information for EEA Residents

1. Information about Cengage 

Cengage is providing this supplemental privacy notice to give individuals in the European Economic Area (EEA) the additional information required by the EU General Data Protection Regulation. These provisions, together with the statements in the Cengage Privacy Notice, explain our practices with regard to EEA personal data. 

This information is being provided by Cengage, Inc. for itself and its subsidiaries: 

Cengage, Inc.
Privacy Office
200 Pier 4 Boulevard, Suite 400
Boston, MA. 02210
Cengage, Inc. is based in the United States. 

Our representative in the EEA is: 

Cengage Learning (EMEA) Limited 
Cheriton House
North Way
Walworth Business Park
Andover
Hampshire
SP10 5BE
Registration Number: Z2487772

2. The Purposes and Legal Basis for Processing, including Legitimate Interests 

The Cengage Privacy Notice explains the reasons why we process your Personal Information. We only process Personal Information when we have a legal basis for the processing, such as: 

To fulfil a contract with you or your school 

For closely-related purposes, such as payment processing and financial account management, contract management, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance 

With your consent (or provided you have not objected, as may be appropriate under applicable law), such to provide you with marketing communications   

We may also process your Personal Information for the purposes of our legitimate interests (or for the legitimate interests of your school, provided that such processing shall not outweigh your rights and freedoms.) In particular, we may process your Personal Information as needed to: 

Protect you, us or others from threats (such as security threats or fraud) or cheating,  

Comply with the laws that are applicable to us around the world, 

Enable or administer our business, such as for quality control, consolidated reporting, and customer service,  

Manage corporate transactions, such as mergers or acquisitions, and   

Understand and improve our business or customer relationships generally.  

3. Automated Decision-Making and Profiling 

We may use profiling and analytics to understand how individuals interact with our educational materials, such as assess engagement and improve learning outcomes, and product development purposes. For example, we may use analytics to study the amount of time that individuals spend on specific content items and we may infer engagement from this process. These analytics also help us understand and improve our materials, as we can determine what materials are more or less accessible to students. We may also use analytics for course integrity purposes, such as to identify individuals that may be cheating. 

We will not make automated decisions about you that may significantly affect you, unless (1) the decision is necessary as part of a contract that we have with you, (2) we have your explicit consent, or (3) we are required by law to use the technology. 

4. When You are Required to Provide Personal Information to Cengage 

In most cases, you are not required by law to provide any Personal Information to Cengage. You are required to provide certain Personal Information to enable us to enter into a contract with you so that you can use our products and services. Our registration forms indicate which data elements are required for our contracts. If you do not provide these data elements, we cannot do business with you. 

5. International Transfers 

As noted above, your Personal Information may be transferred to, stored at or processed in the United States and other countries which may not have equivalent privacy or data protection laws.  

We generally use approved Standard Contractual Clauses to assure that Personal Information is adequately protected when it is transferred out of the European Economic Area or Switzerland, but we may also make transfers to recipients with approved Binding Corporate Rules or to recipients in the United States who have certified to the EU-US and/or Swiss-US Privacy Shield Framework. 

Please contact us via email to privacy@cengage.com if you would like more information about cross-border transfers or to obtain a copy of the Standard Contractual Clauses.   

6. Data Retention 

We will retain your Personal Information for as long as the information is needed for the purposes set forth in Section 3 above and for any additional period that may be required or permitted by law. You may request that we delete your Personal Information. To do so, submit a “right to be forgotten” form and follow the instructions and prompts. Unless we are required by law to retain your information, we will delete it within 30 days of your request. 

7. How to Contact Us  

Please contact us if you have any questions or comments about our privacy practices or this Privacy Notice. You can always reach us via email, privacy@cengage.com. You can also reach us via mail to the addresses given above.

How can you contact us or raise a concern or complaint about how we have collected, used or disclosed your personal information?

You may contact us to update your personal information, or request access to the personal information that we hold about you by emailing privacy@cengage.com. You may also contact us via the Contact Us link on our website, https://cengage.com.au/contact-us, by phone on 1300 790 853, or by writing to us at the address listed below.

If you have concerns or would like to make a complaint about the way that we have collected, used, stored or disclosed or otherwise handled your personal information, please contact our Privacy Steward:

Privacy Steward
Cengage Learning 
Level 5, 80 Dorcas Street
Southbank Vic 3006

Email: privacy@cengage.com

Our Privacy Steward will endeavour to:

• Provide an initial response to your query or complaint within 3 business days; and
• Investigate and attempt to resolve your query or complaint within 30 business days.

If you are not satisfied with the outcome you may contact us again or may wish to contact the Australian Privacy Commissioner in writing at the following address: 

Australian Privacy Commissioner, OAIC, GPO Box 5218, Sydney NSW 2001