This document forms part of the Ozibus Public Website Legal Centre. It should be read together with other policies that apply to the services and channels you use.
This Addendum applies where a customer is authorised by Ozibus to use the Services to process health information or other sensitive information.
The customer confirms that:
- it has lawful authority to collect and process the information;
- use of Ozibus is appropriate for the information involved;
- required notices and consents have been provided;
- access is limited to authorised personnel; and
- the customer has assessed any data-location requirements applicable to it.
Ozibus will:
- process the information only to provide and secure the Services and as otherwise authorised by contract or law;
- restrict access to authorised personnel and subprocessors;
- maintain reasonable security controls;
- impose appropriate confidentiality and privacy requirements on relevant subprocessors;
- assist with confirmed data incidents as required by contract and law; and
- delete or return information in accordance with applicable retention and termination requirements.
Customers acknowledge that the primary Ozibus hosting environment is located in Phoenix, Arizona, United States.
Customers subject to health-information laws, government contracts, funding agreements or mandatory Australian data-residency requirements must determine whether overseas hosting is permitted before using Ozibus for regulated information.
Where a customer enables WhatsApp for a health, disability, aged-care or other regulated workflow, the customer must also determine whether WhatsApp/Meta terms and applicable laws permit the proposed information to be sent through that channel. Customers must not send or request health-related or other sensitive information through WhatsApp where applicable law or WhatsApp policy prohibits that use.
Ozibus may restrict a channel for particular categories of sensitive information or regulated use even where another Ozibus service remains available.