OOHAi Data Processing Addendum
Effective Date: January 5, 2026Last Updated: January 5, 2026This Data Processing Addendum forms part of the agreement between OOHAi Pty Ltd and its business customers.1. PurposeThis Addendum governs the processing of personal data by OOHAi on behalf of business customers in connection with the use of OOHAi services.2. Roles of the PartiesFor platform operations, OOHAi acts as a data controller.Where customers upload or provide personal data for campaign execution or service delivery, OOHAi acts as a data processor.3. Scope of ProcessingProcessing may include collection, storage, transmission, aggregation, and deletion of data as required to provide services.4. Security MeasuresOOHAi applies appropriate technical and organisational measures including encryption, access controls, monitoring, and incident response procedures.5. SubprocessorsOOHAi may engage subprocessors for hosting, payments, analytics, communications, and support.OOHAi ensures subprocessors are subject to confidentiality and security obligations.6. International TransfersWhere data is transferred across borders, appropriate safeguards are applied.7. Data Subject RightsOOHAi supports customers in responding to data subject requests where required by law.8. Data BreachesOOHAi maintains procedures to detect and respond to personal data breaches and will notify customers where required by law.9. Retention and DeletionData is retained only as necessary and deleted or anonymised after service termination unless required by law.10. AuditsReasonable audits may be conducted subject to confidentiality and security requirements.11. Governing LawThis Addendum is governed by the laws of Western Australia.