Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Terms of Service between QuizQualify Ltd ("Processor") and you, the customer ("Controller"), and applies when you use QuizQualify to collect personal data from your quiz respondents.

1. Roles

You (the QuizQualify customer) are the data controller for personal data collected from your quiz respondents. QuizQualify Ltd is the data processor, acting only on your documented instructions.

2. Processing details

Subject matter: Quiz response data including names, email addresses, and quiz answers.

Duration: For the duration of your QuizQualify subscription or until you delete the data.

Nature: Storage, retrieval, export, and deletion of respondent data.

Purpose: Lead qualification and scoring as directed by you.

3. Our obligations as processor

We will: process data only on your instructions; implement appropriate technical and organisational security measures; not engage sub-processors without informing you; assist you in responding to data subject requests; delete or return data on your request.

4. Sub-processors

We use the following sub-processors: Supabase (data storage, EU West Ireland); Clerk (authentication, US); Resend (email delivery, US). All US sub-processors operate under Standard Contractual Clauses.

5. Security

We implement encryption at rest and in transit, access controls, regular security reviews, and incident response procedures. We will notify you of any personal data breach within 72 hours of becoming aware of it.

6. Contact

To exercise your rights or report a breach: [email protected]