---

Beacon Hosting Data Processing Agreement (DPA)

Effective Date: 3 June 2025

This Data Processing Agreement ("DPA") outlines the obligations of Beacon Hosting Pty Ltd as a data processor and you, our customer, as a data controller under applicable international data protection laws, including GDPR.

---

1. Scope and Roles

Beacon Hosting processes personal data strictly on behalf of customers according to documented instructions provided by customers.

• Data Controller — You (Customer): Determines purposes and means of processing personal data.
• Data Processor — Beacon Hosting: Processes personal data on behalf of the controller.

---

2. Data Processing and Security

Beacon Hosting commits to:

• Implement appropriate technical and organizational measures to ensure data security and confidentiality.
• Notify customers promptly in the event of a data breach.

---

3. Sub‑processors

Beacon Hosting may engage trusted sub‑processors, ensuring they comply with equivalent data protection standards.

---

4. Data Transfers

International transfers of personal data will comply with applicable laws, ensuring adequate protection measures (such as Standard Contractual Clauses).

---

5. Customer Obligations

Customers must:

• Ensure lawful data collection and usage.
• Clearly communicate processing instructions.
• Promptly notify Beacon Hosting of any issues.

---

6. Data Subject Rights

Beacon Hosting will assist customers in responding to data subject rights requests, ensuring compliance with international privacy standards.

---

7. Termination

Upon termination of services, Beacon Hosting will securely delete or return all customer personal data within 30 days unless legally obligated otherwise.

---

8. Audits

Beacon Hosting allows customers or authorized auditors to conduct reasonable audits or inspections of data processing practices upon prior written notice.

---

Contact Information

For inquiries related to this DPA, contact us at:

• Email: privacy@beaconhosting.org