Data Processing Agreement (DPA)
Summary of this Agreement:
- Roles: The Client is the Data Controller; Jocatoryorixni Pty Ltd is the Data Processor.
- Purpose: We process data solely to provide editorial and copywriting services.
- Security: We use professional security standards to protect your corporate materials.
- Sub-processors: We use trusted partners like Conetix Pty Ltd for hosting and FormSubmit for enquiries.
Table of Contents
1. Definitions and Scope
This Data Processing Agreement ("DPA") is concluded between the Client (the "Controller") and Jocatoryorixni Pty Ltd (the "Processor"), represented by Director Amelia Robinson, located at 412 Collins Street, Melbourne VIC 3000. This agreement ensures that all personal and corporate data processed during the provision of editorial services is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Subject Matter and Duration
The subject of this DPA is the processing of data necessary for the performance of copywriting, editing, and corporate storytelling services. This agreement remains in effect for the duration of the service contract as defined in our Terms and Conditions.
3. Categories of Data and Subjects
The Processor will handle the following categories of data provided by the Controller:
- Contact Data: Names, email addresses, and phone numbers of the Client's representatives.
- Interview Data: Transcripts, recordings, and personal stories of the Client's employees or stakeholders.
- Corporate Data: Internal briefs, company histories, and proprietary information provided for the purpose of content creation.
4. Obligations of the Processor
Jocatoryorixni Pty Ltd agrees to:
- Process data only on documented instructions from the Controller.
- Ensure that all personnel authorised to process the data have committed themselves to confidentiality.
- Assist the Controller in fulfilling obligations to respond to requests from data subjects in accordance with the Privacy Act 1988 (Cth).
5. Sub-processors
The Processor engages the following sub-processors to facilitate the delivery of services:
- Conetix Pty Ltd: Hosting provider located at 142 Brisbane Street, Ipswich QLD 4305.
- FormSubmit: Third-party service used for processing initial contact enquiries (data transmitted to the USA).
The Processor ensures that these sub-processors provide sufficient guarantees to implement appropriate technical and organisational measures.
6. Security Measures
The Processor implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encrypted communication channels and secure access controls for draft documents.
7. Incident Notification
In the event of a data breach, the Processor shall notify the Controller without undue delay. Such notifications will be handled in alignment with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth).
8. Return, Deletion and Storage
Upon termination of services, the Processor shall return or delete all personal data. In accordance with our business rules, the Processor may store drafts for a period of 6 months to facilitate potential revisions, after which they are permanently deleted unless otherwise agreed in writing.
9. Audit and Compliance
The Processor shall make available to the Controller all information necessary to demonstrate compliance with the obligations laid down in this DPA. Any audits shall be conducted with reasonable notice and during business hours.
10. Final Provisions
This agreement is governed by the laws of Victoria, Australia. Any disputes arising from this DPA shall be subject to the exclusive jurisdiction of the courts in Melbourne.
For enquiries regarding data processing, please contact us at [email protected] or by phone at (03) 9947 6957.
Complaints may be directed to the Office of the Australian Information Commissioner (OAIC), GPO Box 5288, Sydney NSW 2001, https://www.oaic.gov.au.
Updated 15 October 2026.