Global data processing addendum

1. When this addendum applies

This addendum forms part of the Terms of use when a business customer controls personal information stored in LeaseAlarm. If privacy law gives stronger protection, that stronger protection applies.

2. Who makes the decisions

The customer usually decides why and how its uploaded information is used. LeaseAlarm handles it only to provide the features the customer chooses, follow lawful support requests or meet a legal duty. Privacy law may call the customer the controller or business and LeaseAlarm the processor, service provider or contractor.

3. What handling includes

LeaseAlarm may receive, organise, store, show, send, protect, back up, download and delete authorised information. If the customer chooses automatic reading, it may also send the selected document to the named provider and return suggestions for a person to check.

The information may relate to users, employees, contractors, landlords, tenants, suppliers, clients or other people named in authorised records. It may include contact details, roles, locations, leases, contracts, dates, tasks, notes, messages, documents, photos, support information and important activity.

4. What the customer must do

The customer must have a lawful reason to use the information, give required notices, obtain required consent, add only what is needed, choose team access and reminders carefully, respond to privacy requests and avoid unnecessary sensitive information. The customer must not ask LeaseAlarm to break the law.

5. Confidentiality and security

LeaseAlarm will limit access to authorised people who must keep information confidential. Reasonable protection includes secure sign-in, team permissions, encryption while information is sent and stored where supported, private storage, important activity records, backups, security checks and a plan for incidents. No protection removes every risk.

6. Other providers

The customer allows LeaseAlarm to use the provider types named in the Privacy policy. Each provider must agree to protect the information for its role. Where the law requires it, customers will receive notice before an important new provider is added and may object for a genuine privacy reason.

7. Privacy requests and regulators

Where required, LeaseAlarm will reasonably help the customer respond to a verified privacy request, security review, breach duty, impact assessment or regulator. LeaseAlarm will not answer a request about customer-controlled information on its own unless the customer authorises it or the law requires it.

8. A personal information breach

If the law requires it, LeaseAlarm will tell the customer without undue delay after confirming a breach that affects customer-controlled information. We will share known information about what happened, likely effects and steps being taken. Giving notice is not an admission of fault.

9. Return and deletion

The customer may use available download tools while the service is active. After the service ends, LeaseAlarm will return or delete customer-controlled information as chosen or required, subject to the seven-day safety period, backup expiry and records the law allows or requires us to keep. Anything retained stays protected and is not used for another purpose.

10. Overseas transfers

LeaseAlarm uses the protection required by applicable privacy law when information is sent overseas. Depending on the country, this may include the European Commission Standard Contractual Clauses, the United Kingdom International Data Transfer Addendum or Agreement, a Swiss adjustment or another approved method.

11. Information and independent checks

LeaseAlarm will provide information reasonably needed to show that it is meeting these duties. Where required, we will first provide current independent reports or written answers. If that is not enough, a qualified independent reviewer may carry out a reasonable confidential check without exposing another customer’s information or creating a security risk.

12. Sensitive information and contact

LeaseAlarm is not designed to store health records, biometric identification, full card information, government identity numbers, criminal records, children’s information or another specially regulated category unless the product clearly says that category is supported.

Questions about this addendum can be sent to leasealarm@gmail.com. Do not email passwords, sign-in codes or private documents.