Data Processing Agreement

Overview

This Data Processing Agreement ("DPA") forms part of the Terms of Service between Lead Magic Corporation ("LeadMagic," "we," "us," or "our") and you ("Customer") for the use of LeadMagic services that involve processing of personal data.

This DPA is designed to meet the requirements of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

Scope and Applicability

This DPA applies to all processing of personal data by LeadMagic on behalf of the Customer in connection with the Services. It establishes the obligations of both parties regarding data protection and privacy when processing personal data.

Our Commitments

LeadMagic commits to:

• Process personal data only on documented instructions from the Customer
• Ensure persons authorized to process data have committed to confidentiality
• Implement appropriate technical and organizational security measures
• Assist the Customer with data subject requests and DSAR compliance
• Notify the Customer of any personal data breaches without undue delay
• Delete or return all personal data upon termination of services
• Make available all information necessary to demonstrate compliance

Sub-processors

We use carefully selected sub-processors to help deliver our Services. A current list of sub-processors is available upon request. We will notify customers of any changes to sub-processors and provide an opportunity to object.

International Data Transfers

For transfers of personal data outside the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other legally approved transfer mechanisms.