Data Processing Addendum

1. Purpose

This Data Processing Addendum applies where a business user uploads or records customer personal information in MilaPay and MilaPay processes that information to provide the service.

2. Roles

The business user is generally responsible for deciding why and how their customer information is used. MilaPay processes that information to provide the service, follow lawful instructions and protect the data.

3. Processing activities

Processing may include storing customer records, transaction history, notes, reminders, message templates, payment status, payment references and support information.

4. Instructions

MilaPay will process customer information to provide the service, support the user, maintain security, comply with law and perform actions requested by the business user.

5. Confidentiality and security

MilaPay will use reasonable technical and organisational measures to protect customer information against unauthorised access, loss, misuse or disclosure.

6. Sub-processors

MilaPay may use trusted providers for hosting, messaging, payments, email, backups, analytics and support. We remain responsible for selecting reputable providers and using appropriate safeguards.

7. Security incidents

If we become aware of unauthorised access to customer information, we will take reasonable steps to investigate, contain the issue, assess impact and notify affected business users where required.

8. Deletion and export

Business users may request export or deletion of their data, subject to legal, accounting, fraud prevention and operational retention requirements.