Data Processing Agreement

Last updated: Aug 2026

1. Purpose

This Data Processing Agreement ("DPA") forms part of the agreement between the client ("Controller") and Mão Mèo, a part of Lumacore Pte Ltd ("Processor"), governing the processing of personal data on the Controller's behalf.

2. Scope of Processing

We process personal data only as necessary to deliver contracted social media management, advertising, and marketing services, and only on the Controller's documented instructions.

3. Confidentiality

Personnel authorized to process personal data are bound by confidentiality obligations, whether contractual or statutory.

4. Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure.

5. Sub-processors

We may engage sub-processors (e.g. hosting, analytics, scheduling tools) to support service delivery, and will ensure they are bound by equivalent data protection obligations.

6. Data Subject Rights

We will assist the Controller in responding to data subject requests (access, correction, deletion) relating to personal data we process on their behalf.

7. Data Return & Deletion

Upon termination of services, we will return or delete personal data processed on the Controller's behalf, unless retention is required by law.

8. Contact Us

Questions about this DPA? Email us at hello@maomeo.agency.