Data Processing Agreement

This DPA reflects the parties' agreement with respect to the processing of personal data by Bizy on behalf of the Customer in connection with the Bizy services. As a Filipino business solution, Bizy is committed to complying with applicable data protection laws, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

Bizy will process personal data only for the purpose of providing the services as described in our Terms of Service and in accordance with your documented instructions.

• Contact information (name, email, phone number)
• Business information
• Customer interaction data
• User account information
• Communication content
• Technical data (IP address, device information)

• Warrant that you have all necessary rights to provide the personal data to Bizy for processing
• Are responsible for the accuracy and legality of the personal data provided
• Will inform data subjects about the processing of their personal data
• Will respond to data subject requests with our assistance

• Process personal data only on your documented instructions
• Ensure that persons authorized to process personal data are bound by confidentiality obligations
• Implement appropriate technical and organizational security measures
• Assist you in responding to data subject requests
• Assist you in ensuring compliance with security obligations
• Delete or return all personal data after the end of services
• Provide you with information necessary to demonstrate compliance

• Encryption of personal data in transit and at rest
• Regular testing and evaluation of security measures
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures
• Staff training on data protection and security

Bizy may engage sub-processors to assist in providing the services. We will inform you of any intended changes concerning the addition or replacement of sub-processors and give you the opportunity to object. All sub-processors will be bound by written agreements requiring them to provide at least the level of data protection required of Bizy under this DPA.

Bizy will not transfer personal data outside the Philippines unless:

• You have given explicit consent to the transfer
• The transfer is necessary for the performance of a contract
• Appropriate safeguards are in place
• The transfer is to a country with adequate level of protection as determined by the National Privacy Commission

In the event of a personal data breach, Bizy will:

• Notify you without undue delay after becoming aware of the breach
• Provide you with sufficient information to allow you to meet any obligations to report the breach
• Take reasonable steps to mitigate the effects and minimize any damage resulting from the breach

Upon reasonable notice, you may audit Bizy's compliance with this DPA, provided such audit does not disrupt our normal operations.

Upon termination of services, Bizy will delete or return all personal data as requested by you, unless retention is required by law.

Each party's liability arising out of or related to this DPA is subject to the limitations of liability set forth in the Terms of Service.