Data Processing Agreement

1. Introduction

This Data Processing Agreement ("DPA") forms part of the service agreement between Scale Value ("Processor") and the Client ("Controller") for the provision of digital marketing, AI automation, and related services.

This DPA sets out the terms that apply when personal data is processed by Scale Value on behalf of the Client in connection with our services.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on personal data, including collection, storage, use, and deletion.
• "Data Subject" means the individual to whom the personal data relates.
• "Sub-processor" means any third party engaged by Scale Value to process personal data.

3. Scope of Processing

Scale Value will process personal data only:

• In accordance with the Client's documented instructions
• For the purposes specified in the service agreement
• In compliance with applicable data protection laws

4. Security Measures

Scale Value implements appropriate technical and organizational measures to ensure security of personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and audits
• Employee training on data protection
• Incident response and breach notification procedures

5. Sub-processors

Scale Value may engage sub-processors to assist in providing services. We maintain a list of approved sub-processors and will notify the Client of any changes. Current sub-processors include:

• Cloud hosting providers (AWS, Vercel)
• Analytics platforms
• Email service providers
• CRM systems (GoHighLevel)

6. Data Subject Rights

Scale Value will assist the Client in responding to data subject requests, including:

• Right of access
• Right to rectification
• Right to erasure
• Right to data portability
• Right to object to processing

7. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Upon termination of services, Scale Value will delete or return all personal data as instructed by the Client.

8. International Transfers

If personal data is transferred outside the European Economic Area (EEA) or the jurisdiction of the Client, Scale Value ensures appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms.

9. Breach Notification

In the event of a personal data breach, Scale Value will notify the Client without undue delay (and in any event within 72 hours) upon becoming aware of the breach, providing details of the incident and steps taken to mitigate its impact.

10. Contact

For questions about this Data Processing Agreement or to exercise data protection rights, please contact:

connect@scalevalue.in