Data Processing Addendum
Last updated: May 2026
This Data Processing Addendum ("DPA") forms part of the agreement between Biztreck Solutions ("Processor") and the Customer ("Controller") and applies whenever Biztreck processes personal data on behalf of Customer.
1. Subject matter and duration
Biztreck processes personal data only to provide the services described in the relevant Statement of Work, for the duration of the engagement plus a reasonable period for return or deletion of data.
2. Nature and purpose of processing
Hosting, building, securing, and operating digital products on behalf of the Customer, including support and analytics where applicable.
3. Categories of data subjects and personal data
End-users of Customer's products and Customer's personnel. Typical categories include identifiers, contact info, and usage data; sensitive categories are processed only if explicitly agreed.
4. Processor obligations
- Process personal data only on documented instructions from Controller.
- Ensure persons authorised to process data are bound by confidentiality.
- Implement appropriate technical and organisational measures.
- Assist Controller in responding to data subject requests.
- Notify Controller of personal data breaches without undue delay.
- Make available all information necessary to demonstrate compliance.
5. Sub-processors
Customer authorises Biztreck to engage sub-processors. Biztreck remains liable for sub-processors' compliance with this DPA. A list of sub-processors is available on request, and Customer will be notified of material changes.
6. International transfers
Where personal data is transferred outside the EEA or UK, the parties rely on Standard Contractual Clauses and any required supplementary measures.
7. Audits
Once per year, with reasonable notice and at Customer's expense, Customer may audit Biztreck's compliance with this DPA.
8. Return or deletion of data
On termination, Biztreck will return or delete personal data within 60 days, unless retention is required by law.
9. Contact
To execute a signed DPA, email connect@biztreck.world.
