This DPA applies when Phantix processes personal data on behalf of customers in the EU/UK.

Customer = Data Controller
Phantix = Data Processor

Phantix processes data only under documented customer instructions.

- Encrypted transmission (HTTPS) - Access controls - Infrastructure security

We may use cloud hosting, analytics, and communication providers.

We assist customers in responding to access, deletion, and correction requests.

We implement appropriate safeguards where required.

We notify customers without undue delay upon discovery of a data breach.