Patona Digital Pty Ltd (ABN 92 654 805 437) trading as teamified ("teamified", "we", "us", "our")
Last updated: 20 October 2026
Version 1.0
1. Roles.
The CLIENT determines the purposes of processing Personal Information contained in Client Data; teamified processes it on the CLIENT's behalf to provide the Services and as permitted by this Agreement. Each Party complies with the Privacy Laws applicable to it in its role.
2. Compliance.
teamified will handle Personal Information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, including (from their commencement) the obligations relating to automated decision-making transparency (APPs 1.7 to 1.9), and will maintain a privacy policy describing its use of automated decision-making consistent with those obligations.
3. Purpose limitation.
teamified will process Personal Information in Client Data only: (a) to provide the Services; (b) as instructed in writing by the CLIENT; or (c) as required by law (in which case teamified will notify the CLIENT unless prohibited). teamified will not sell Personal Information or use it for advertising.
4. Cross-border disclosure.
The CLIENT acknowledges that teamified operates globally and authorises the processing of Personal Information in the locations in which teamified and its approved sub-processors operate, as set out in teamified's current list of processing locations and sub-processors, available on request. teamified will: (a) give the CLIENT prior notice of any new processing location or sub-processor, with a reasonable opportunity to object on legitimate grounds; (b) ensure that protections materially no less protective than this Schedule and Schedule 4 apply wherever Personal Information is processed; (c) remain accountable for overseas recipients as required by Australian Privacy Principle 8; and (d) teamified hosts the Platform on Microsoft Azure. Client Data is stored in the Australian region.
5. Data subject and candidate requests.
teamified will refer to the CLIENT any request or complaint from an individual relating to Personal Information in Client Data, and will provide reasonable assistance under paragraph 7 of Schedule 4.
6. Data Breach.
Data Breach notification and response are governed by paragraph 6 of Schedule 4.
7. Sub-processors.
Governed by paragraph 4 of Schedule 4.
8. Return and deletion.
Governed by paragraph 8 of Schedule 4 and clause 5.7.
9. US state privacy laws.
Where the CLIENT is subject to the California Consumer Privacy Act (as amended by the CPRA) or another US state privacy law, teamified acts as a "service provider"/"processor": it will not sell or share Personal Information, will not retain, use or disclose it other than to perform the Services or as permitted by that law, and will cooperate with reasonable compliance verification. Additional state-specific terms may be set out in an annexure to the applicable Order Form or Plan Terms.
10. Other regimes.
Where processing is subject to the GDPR or another regime requiring prescribed processor terms, the Parties will execute the required addendum, which forms part of this Schedule.