Data Processing Addendum

This Data Processing Addendum ("DPA") forms part of the agreement between Biztreck Solutions ("Processor") and the Customer ("Controller") and applies whenever Biztreck processes personal data on behalf of Customer.

1. Subject matter and duration

Biztreck processes personal data only to provide the services described in the relevant Statement of Work, for the duration of the engagement plus a reasonable period for return or deletion of data.

2. Nature and purpose of processing

Hosting, building, securing, and operating digital products on behalf of the Customer, including support and analytics where applicable.

3. Categories of data subjects and personal data

End-users of Customer's products and Customer's personnel. Typical categories include identifiers, contact info, and usage data; sensitive categories are processed only if explicitly agreed.

4. Processor obligations

• Process personal data only on documented instructions from Controller.
• Ensure persons authorised to process data are bound by confidentiality.
• Implement appropriate technical and organisational measures.
• Assist Controller in responding to data subject requests.
• Notify Controller of personal data breaches without undue delay.
• Make available all information necessary to demonstrate compliance.

5. Sub-processors

Customer authorises Biztreck to engage sub-processors. Biztreck remains liable for sub-processors' compliance with this DPA. A list of sub-processors is available on request, and Customer will be notified of material changes.

6. International transfers

Where personal data is transferred outside the EEA or UK, the parties rely on Standard Contractual Clauses and any required supplementary measures.

7. Audits

Once per year, with reasonable notice and at Customer's expense, Customer may audit Biztreck's compliance with this DPA.

8. Return or deletion of data

On termination, Biztreck will return or delete personal data within 60 days, unless retention is required by law.

9. Contact

To execute a signed DPA, email connect@biztreck.world.