Data processing
1. Role
When you use the Maintenance Partners platform, Maintenance Partners Pty Ltd acts as a data processor on your behalf. You remain the data controller for the data you put into the platform (inspection records, client lists, asset registers, and so on). We process that data solely under your instruction and for the purposes documented in our terms of service and privacy policy.
2. Data location
Customer operational data is stored in Australian data centres. Backups are replicated within Australia. Where a supporting service processes data outside Australia, the transfer is covered by contractual safeguards that meet the standards of the Australian Privacy Principles.
3. Retention
Active customer data is retained for as long as you operate an account. On cancellation, data is retained for 30 days to allow migration, then permanently deleted. Invoicing and audit records required under Australian law are retained for seven years.
4. Sub-processors
We maintain a current list of sub-processors that support the Service. Material additions are announced to customers at least 30 days in advance. Current sub-processors are limited to: our cloud infrastructure provider (Australian region), a transactional email provider, and an error monitoring service. Sub-processor details available on request at admin@maintenancepartners.com.au.
5. Security measures
Encryption in transit (TLS) and at rest. Role-based access control enforced at application and infrastructure layers. Administrative actions logged and reviewed. Multi-factor authentication required for privileged access. Backups tested on a regular cadence.
6. Incident notification
In the event of a data breach involving customer data, we notify affected customers as soon as practicable and in any case within the windows required under the Australian Notifiable Data Breaches scheme.
7. Data subject requests
Where an individual whose personal information you hold on the platform exercises a right under privacy law, we will assist you to respond within the statutory window. Requests should be routed through your account so that we can verify authorisation before acting.
8. Contact
Data queries: admin@maintenancepartners.com.au.