Data Processing Addendum

Last updated: January 3, 2025

This Data Processing Addendum (“DPA”) is incorporated by reference into the Master Services Agreement (the “MSA”) or any other agreement for the delivery of products or services by Ready Results (as defined below) to the Customer (the MSA and any such other agreement, each an “SA”). This DPA is in force as of the Effective Date of the SA.

Any defined terms not otherwise defined herein shall have the meaning given to them in the SA, and all principles of interpretation shall be those set forth in the SA.

“Ready Results” shall mean Ready Results Inc., a company incorporated under the laws of Canada, located at 2 Robert Kemp Street, Ottawa, Ontario, Canada. This DPA is supplemental to the SA and sets out the terms that apply when Personal Data (defined below) is Processed (defined below) by Ready Results under the SA. The purpose of the DPA is to ensure such Processing is conducted in accordance with applicable laws, including EU Data Protection Legislation (defined below), and with due respect for the rights and freedoms of individuals whose Personal Data is Processed.

DATA PROCESSING TERMS

In providing the Products and Services to Customer pursuant to the SA, Ready Results may Process Personal Data on behalf of Customer. Ready Results will comply with the provisions in this DPA with respect to its Processing of any Personal Data.

Capitalized terms used but not defined in this DPA have the same meanings as set out in the SA.

Definitions

1.1 For the purposes of this Data Processing Addendum:

(a) “Ready Results” means Ready Results Inc., including its affiliates and subsidiaries, acting as a Processor.

(b) “Affiliate(s)” means any entity that controls, is controlled by, or is under common control with the Party.

(c) “Controller” means the entity which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.

(d) “Customer” means the non-Ready Results party to both the SA and this DPA that has access to the Products and Services.

(e) “Customer Data” means any information that is held, used, or provided to Ready Results by the Customer in the course of Customer’s use of the Products and Services.

(f) “Data Subject” means the individual to whom Personal Data relates.

(g) “EEA” means the European Economic Area, including the United Kingdom.

(h) “Data Protection Legislation” includes GDPR, CCPA, and other applicable privacy laws.

(i) “Personal Data” means any Customer Data relating to an identifiable natural person.

(j) “Processor” means an entity that Processes Personal Data on behalf of the Controller.

(k) “Processing” means operations performed on Personal Data such as collection, storage, retrieval, use, disclosure, or destruction.

(l) “Products and Services” means the lead generation, marketing, and customer support services provided by Ready Results.

(m) “Supervisory Authority” means an independent public authority established under EU Data Protection Legislation.

Applicability of Data Processing Addendum

2.1 Applicability. This DPA applies to all Customers to the extent Ready Results Processes Personal Data of Data Subjects on behalf of a Customer or a Customer Affiliate.

Details of the Processing

3.1 Types of Personal Data Processed. Categories of Personal Data include names, contact information, and lead generation data as provided by the Customer.

3.2 Special Categories of Personal Data. Special categories are not required for the provision of Products and Services. If included by Customer, it is done at their sole discretion.

3.3 Categories of Data Subjects. Data Subjects include leads, prospects, and customers identified by Customer.

3.4 Nature of Processing Operations. Processing operations include collection, storage, use, and destruction of Personal Data.

Roles and Responsibilities

4.1 Roles. Customer is the Controller, and Ready Results acts as a Processor.

4.2 Purpose Limitation. Ready Results will Process Personal Data only as instructed by Customer.

4.3 Training. Ready Results ensures employees receive training on data security and protection.

4.4 Compliance. Both parties comply with applicable data protection laws.

Security

5.1 Security. Ready Results uses encryption and security controls to protect data.

5.2 Confidentiality. Employees and contractors handling Personal Data are bound by confidentiality agreements.

5.3 Security Incidents. Ready Results will notify Customer of data breaches within 72 hours.

Sub-processing

6.1 Sub-processors. Ready Results uses third-party providers for hosting, marketing, and IT services, and ensures they comply with data protection standards.

6.2 Changes to Sub-processors. Customers will be notified of changes, and objections will be handled on a case-by-case basis.

Cooperation

7.1 Data Subject Rights. Ready Results assists Customers with data access, correction, and deletion requests.

7.2 Supervisory Authorities. Ready Results cooperates with regulatory authorities.

Security Reports and Audits

8.1 Audits. Customers may request audit reports or perform on-site audits under confidentiality agreements.

Deletion or Return of Customer Data

9.1 Deletion Requests. Personal Data is retained for two years unless requested to be deleted earlier.

Miscellaneous

10.1 This DPA supplements and does not replace the SA.

10.2 Conflicts between the DPA and SA are resolved in favor of the DPA.

International Data Transfers

11.1 Ready Results complies with international transfer laws, including GDPR and CCPA.

Annex 1 – Technical and Organizational Security Measures

Ready Results implements administrative, technical, and physical controls, including:

Data encryption in transit and at rest.

Network security with firewalls and VPNs.

Regular data backups and recovery plans.

Role-based access and multi-factor authentication.

Incident response and breach notification procedures.

Annex 2 – List of Sub-Processors

Sub-Processor | Purpose | Location Amazon Web Services | Cloud Storage | USA & Canada Twilio Inc. | Communication Tools | USA Google Workspace | Email and Collaboration | Global Stripe | Payment Processing | USA

Contact Information: Ready Results Attn: Privacy Officer 2 Robert Kemp St, Ottawa, ON, Canada Email: info@readyresults.ai