When this applies
This Data Processing Addendum ("DPA") is part of the Terms of Service between Pascat Graphics & Marketing ("Processor") and a business customer ("Customer"). It applies when Rickey processes personal information about the Customer's callers, leads, and customers ("Customer Personal Data").
Roles
The Customer decides why and how Customer Personal Data is processed. Pascat processes it only to provide the Service and on the Customer's documented instructions, including instructions given through the dashboard and campaign settings.
Confidentiality and security
Pascat ensures people who access Customer Personal Data are bound by confidentiality, and keeps reasonable technical and organizational security measures, including encryption in transit, access controls, and server-side handling of carrier credentials.
Subprocessors
The Customer authorizes the subprocessors listed on our Subprocessors page. We'll post changes there at least 14 days before a new subprocessor starts processing Customer Personal Data, and the Customer may object on reasonable grounds.
Helping with requests
We'll help the Customer respond to people exercising privacy rights, such as requests to access or delete their information, and forward any such request we receive directly.
Security incidents
If we confirm a breach affecting Customer Personal Data, we'll notify the Customer without undue delay, and within [e.g. 72 hours] where feasible, with the information reasonably available.
Return and deletion
When the Service ends, we'll make Customer Personal Data available for export and then delete it, as described in our Refund & Cancellation Policy, except where the law requires us to keep it.
Health information
Hi Rickey is not offered as a HIPAA business associate service unless we sign a separate Business Associate Agreement with you. Healthcare customers must not use Rickey to collect protected health information without one.