Data Processing Terms

1. What these terms cover

"Lead Data" means personal information about people who view or fill in your cards ("Visitors") that MyDigiCards processes for you, including:

• names, phone numbers, email addresses, company and other form answers;
• notes and messages, survey answers and booking requests;
• DigiSnap selfies and the event you met them at;
• contact files or links Visitors send you with "share back";
• view and tap analytics linked to your card.

Purpose: to show Lead Data to you, store it, let you export it, and run the related features. Duration: for as long as you use the Service, plus the deletion periods below.

2. Your responsibilities as controller

• Have a lawful basis for collecting and using Lead Data, and tell Visitors how you will use it (for example in your own privacy notice, which you can link from your card).
• Get any consent the law requires, including before calling, texting or emailing Visitors, and keep records of it.
• Keep the MyDigiCards privacy notice under your forms and the DigiSnap selfie consent in place.
• Do not collect sensitive information or information from children under 13 through your cards.
• Answer Visitors' privacy requests (access, deletion, correction, opt-out). You can delete leads in the app; we will help with anything you can't do yourself.
• Agencies: make sure your Sub-account customers accept these responsibilities.

3. Our commitments as processor

• We process Lead Data only on your instructions, which are these Terms and the way you set up and use the Service, unless the law requires otherwise (in which case we will tell you, unless the law forbids it).
• As your service provider under the CCPA, we will not sell or share Lead Data, use it for our own purposes or advertising, keep or use it outside our direct business relationship with you, or combine it with personal information from other sources except as the law allows. We will tell you if we can no longer meet these obligations.
• Only staff and contractors who need access to run the Service can access Lead Data, and they are bound by confidentiality.
• We protect Lead Data with appropriate security: encryption in transit, database rules that separate each account's data, access controls and abuse limits.
• We will help you respond to Visitors' privacy requests and to regulators where reasonable.
• If we learn of a security breach affecting your Lead Data, we will tell you without undue delay (and aim to within 72 hours) with the information you need to meet your own obligations.
• When your account ends, we delete Lead Data after the 30-day export window, except copies in backups until they expire or anything the law requires us to keep.
• On reasonable written request (no more than once a year), we will give you information that shows we meet these terms.

4. Subprocessors

You allow us to use the subprocessors listed in our Privacy Policy. Each is bound by written terms that protect Lead Data at least as well as these. We will update that list before adding a new subprocessor that handles Lead Data. If you object on reasonable data-protection grounds, tell us and we will try to find a solution; if we can't, you may cancel the affected plan.

5. Where Lead Data is stored

Lead Data is stored in the United States. If you collect Lead Data from people outside the United States, you are responsible for any transfer requirements in their country. Email us if you need additional terms (for example EU Standard Contractual Clauses).

6. Contact

Premier Marketing Group International Inc., Vantage Technologies division, 9145 N Narcoossee Road, Suite 106-193, Orlando, Florida 32827, USA
Email: legal@mydigicards.io