Data Processing Addendum

Application and instructions

These processing provisions apply when a written agreement or order between Sitekick and a customer expressly incorporates them and identifies the covered service. The customer determines the purposes and lawful basis for processing personal data it places in that service. Sitekick processes covered data to provide the agreed service and follow documented, lawful customer instructions, subject to applicable law.

The written arrangement must identify the customer, covered CMS or Studio deployment, processing purpose and duration, data categories, data subjects, applicable providers and any required transfer terms. This page alone does not confirm that a particular deployment is approved for regulated or specially protected data.

Covered processing and safeguards

Depending on the agreed service, processing can include hosting website content, handling authorized contact or booking information, supporting the account and performing requested content generation. Provide only data required for those activities. Sitekick limits access to authorized personnel and service providers performing the agreed work, subject to confidentiality obligations and appropriate technical and organizational safeguards.

The applicable written arrangement governs subprocessors, international transfers, notification of personal data breaches, assistance with data-subject requests and customer compliance obligations, and information needed to demonstrate compliance. Do not assume that using a website builder supplies consent, a lawful basis or an authorization to disclose another person's data.

Return, deletion and arranging coverage

At the end of covered processing, return or deletion follows the written agreement and applicable legal retention requirements. Backups, transaction records and separately controlled third-party services may have different retention obligations. Contact support@sitekick.ai to request the applicable processing agreement and deployment details before uploading data that requires contractual coverage. Until that arrangement is confirmed, avoid sending that data.