Data Processing Agreement

This Data Processing Agreement (“DPA”) forms part of the Terms of Service between you (the “Controller”) and LzyBooks(the “Processor”) and applies where LzyBooks processes personal data of your buyers and leads on your behalf.

1. Scope and roles

You are the controller of the buyer and lead data collected through your funnels. LzyBooks processes that data solely to provide the Service and on your documented instructions, which include these Terms and your use of the product.

2. Processor obligations

• Process personal data only on your instructions, except where required by law.
• Ensure people authorized to process the data are bound by confidentiality.
• Implement appropriate technical and organizational security measures.
• Assist you, where reasonable, in responding to data-subject requests and security incidents.
• Delete or return personal data at the end of the Service, subject to legal retention.

3. Sub-processors

You authorize LzyBooks to engage sub-processors (such as hosting, email, and payment providers) to deliver the Service. We remain responsible for their compliance with this DPA and will use reasonable efforts to notify you of material changes to our sub-processors.

4. International transfers

Where personal data is transferred across borders, we apply appropriate safeguards as required by applicable data-protection law.

5. Security incidents

We will notify you without undue delay after becoming aware of a personal-data breach affecting your data, and provide information reasonably available to help you meet your notification obligations.

Contact

For data-processing questions, contact support@lzybooks.com.