Data Processing Agreement

Last updated: 2/16/2026

1. Definitions

  • Controller: The entity that determines the purposes and means of processing personal data
  • Processor: The entity that processes personal data on behalf of the Controller
  • Personal Data: Any information relating to an identified or identifiable natural person
  • Processing: Any operation performed on personal data

2. Scope and Purpose

This Data Processing Agreement ("DPA") governs the processing of personal data by Parfect Performance when acting as a processor on behalf of our users (data controllers) or when we engage third-party processors to assist in providing our services.

3. Our Role as Processor

When processing personal data on behalf of users, we agree to:

  • Process personal data only in accordance with your instructions
  • Implement appropriate technical and organizational measures to ensure security
  • Assist you in responding to data subject requests
  • Notify you of any data breaches without undue delay
  • Maintain records of processing activities

4. Third-Party Processors

We may engage third-party service providers to assist in providing our services. These processors are bound by contractual obligations to protect your personal data and may include:

  • Cloud hosting providers
  • Analytics service providers
  • Payment processors
  • Email service providers

5. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Backup and disaster recovery procedures

6. Data Subject Rights

We will assist you in fulfilling data subject rights requests, including access, rectification, erasure, and data portability requests, in accordance with applicable data protection laws.

7. Data Retention

We retain personal data only for as long as necessary to provide our services or as required by law. Upon termination of services, we will delete or return personal data in accordance with your instructions.

8. International Transfers

If personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

9. Contact Information

For questions about this Data Processing Agreement, please contact us at privacy@parfectperformance.com