1. Scope and Roles of the Parties

This Data Processing Agreement ("DPA") forms part of the Master Terms of Service between the customer ("Customer" or "Data Controller") and Sues Tech Solutions, a DBA of Sues Beautiful Cuts LLC, Mississippi Business ID: #1560623 ("Data Processor"). This DPA governs the processing of Personal Data uploaded, transmitted, or stored by the Customer within Sues Tech Solutions' SaaS applications and cloud engineering environments.

2. Customer Obligations (Data Controller)

The Customer warrants that it has all necessary rights and legal bases (under GDPR, CCPA, and applicable US state laws) to provide Personal Data to Sues Tech Solutions for processing. The Customer is solely responsible for the accuracy, quality, and legality of the Customer Data.

3. Sues Tech Solutions Obligations (Data Processor)

Sues Tech Solutions shall:

• Process Personal Data only on documented instructions from the Customer, including with regard to transfers of personal data to a third country, unless required to do so by applicable law.
• Ensure that engineering and support personnel authorized to process the Personal Data have committed themselves to strict confidentiality and security training.
• Assist the Customer in fulfilling its obligation to respond to requests for exercising data subject rights (such as data access, rectification, or erasure).

4. Technical and Organizational Security Measures

Sues Tech Solutions implements industry-standard security controls to protect Customer Data, including:

5. Authorized Sub-Processors

The Customer grants general written authorization to Sues Tech Solutions to engage the following industry-leading sub-processors to host infrastructure and process transactions:

6. Personal Data Breach Notification

Sues Tech Solutions shall notify the Customer without undue delay (and in any event within 72 hours) after becoming aware of a confirmed Personal Data Breach affecting Customer Data, providing sufficient technical details to allow the Customer to meet its regulatory reporting obligations.

7. Return or Deletion of Data

Upon termination or expiration of the Customer’s SaaS subscription or engineering contract, Sues Tech Solutions shall, at the choice of the Customer, delete or return all Customer Data within thirty (30) days, unless applicable law requires storage of the data.

8. Contact for Privacy & Compliance