Data Processing Agreement.

This DPA applies where the Operator, Dale Mooney, a sole trader based in the United Kingdom, trading as Billboard Badger (Processor), processes personal data for an account holder (Controller) to provide the service. It supplements the Terms of Service and prevails on data protection matters.

1. Subject, duration and purpose

Providing the service, for as long as the account is open plus the retention in section 5: reading product sites, drafting, storing and publishing content.

2. Data and people

Personal data that appears in product sites, drafts, artwork or uploads, and the Controller's own account details.

3. The Processor's obligations

1. Process only on documented instructions, use of the service being that instruction.
2. Keep it confidential.
3. Apply the measures on the security page.
4. Use only the sub-processors listed, on terms no less protective, remaining responsible for them.
5. Help with data subject requests, security and impact assessments.
6. Notify a personal data breach without undue delay.

4. Sub-processors

Listed on the sub-processors page, with notice before one is added so the Controller may object.

5. Deletion

On closing the account, data leaves live systems at once and backups within 30 days, confirmed in writing on request.

6. Transfers, audit and law

Transfers outside the UK use an appropriate mechanism such as the UK IDTA. Reasonable audit requests are answered once a year. Liability follows the Terms; the laws of England and Wales apply.