1. Purpose
This Data Processing Agreement explains the data protection responsibilities that apply where FabQT processes personal data on behalf of a customer using the platform.
2. Roles
In most cases, the customer acts as controller of data entered into FabQT, and FabQT acts as processor when providing the hosted software service.
3. Processing instructions
FabQT will process customer personal data only to provide, secure, support and maintain the service, or as otherwise instructed by the customer or required by law.
4. Security measures
- Tenant separation and access controls.
- Password-protected user accounts and role-based permissions.
- Operational safeguards for hosting, backup, support and platform maintenance.
- Reasonable technical and organisational measures to protect data.
5. Sub-processors
FabQT may use trusted sub-processors for hosting, infrastructure, email, payments, support and related services. FabQT remains responsible for ensuring appropriate processing safeguards are in place.
6. Customer responsibilities
The customer is responsible for lawful collection and use of data, assigning appropriate user permissions, maintaining accurate records and responding to data subject requests where required.
7. Assistance and deletion
FabQT will provide reasonable assistance with data protection requests and, upon termination, will handle customer data in line with applicable retention, deletion and export procedures.