Data Processing Agreement

1. Introduction

This Data Processing Agreement ("DPA") forms part of the service agreement between Vouchup Technologies Pvt. Ltd. ("Vouchup," "we," "us") and the customer ("Customer," "you") for the provision of Vouchup's digital gifting and rewards platform services.

2. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person
• Processing: Any operation performed on personal data
• Data Controller: The entity that determines the purposes and means of processing
• Data Processor: The entity that processes personal data on behalf of the controller

3. Roles and Responsibilities

Customer acts as the Data Controller and Vouchup acts as the Data Processor for personal data processed through our services. Vouchup will process personal data only on documented instructions from the Customer.

4. Data Security Measures

Vouchup implements appropriate technical and organizational measures including:

• Encryption of personal data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

5. Data Transfers

Any transfer of personal data to third countries or international organizations will be subject to appropriate safeguards as required by applicable data protection laws.

6. Data Subject Rights

Vouchup will assist the Customer in fulfilling data subject requests including access, rectification, erasure, portability, and objection to processing.

7. Data Breach Notification

Vouchup will notify the Customer without undue delay upon becoming aware of a personal data breach affecting the Customer's data.

8. Contact Information

For questions regarding this DPA, please contact our Data Protection Officer at:
Email: dpo@vouchup.in
Address: Vouchup Technologies Pvt. Ltd., India