Processing terms for customer data.

This addendum applies when Quick Elements processes personal data for you as part of the service.

• You are generally the controller for personal data you put into your websites, accounts, domains, forms, customers, and integrations.
• Quick Elements processes that data as your processor or service provider, only to provide and support the service and follow lawful instructions.
• We use sub-processors to run hosting, domains, email, cloud, payments, support, analytics, and AI features where applicable.
• We maintain reasonable security measures, assist with rights requests, and notify you of personal-data breaches without undue delay.
• At the end of service, we delete or return personal data according to the terms, backups, and legal-retention needs.

This Data Processing Addendum supplements the Terms of Service when Quick Elements processes personal data on your behalf. It applies to personal data you submit to, store in, generate through, or instruct us to process through Quick Elements websites, accounts, domains, forms, files, email, cloud tools, AI features, API usage, and support workflows.

If you and Quick Elements sign a separate data-processing agreement, that signed agreement controls where it conflicts with this addendum.

For customer-controlled data, you are the controller or business and Quick Elements is the processor or service provider. You determine what personal data is collected, why it is collected, and whether you have a lawful basis to process it. Quick Elements processes the data only on documented instructions, including these terms, product configuration, support requests, and lawful written instructions you provide.

Quick Elements may act as an independent controller for account administration, billing, security, fraud prevention, legal compliance, analytics, and business operations described in the Privacy Policy.

You instruct Quick Elements to process personal data as needed to provide, secure, monitor, troubleshoot, back up, improve, and support the service; provision websites, domains, email, cloud, and integrations; process payments and payouts; route AI requests when enabled; prevent abuse; and comply with law.

We will notify you if we believe an instruction violates applicable data-protection law, unless the law prohibits us from doing so.

Quick Elements maintains reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. Measures include access controls, credential protection, encrypted transport, backups, monitoring, logging, least-privilege practices, staff confidentiality obligations, and incident-response procedures appropriate to the nature of the service.

You are responsible for configuring your account securely, limiting user access, protecting credentials, reviewing generated content before use, and maintaining any notices or consents required for your websites and customers.

You authorize Quick Elements to use sub-processors that help provide the service, including hosting and infrastructure providers, domain registrars, payment processors, email and cloud service providers, transactional email providers, support and monitoring tools, analytics providers, and AI providers where features are enabled.

We require sub-processors to protect personal data in a manner appropriate to their role. We will provide information about current sub-processors on request and make reasonable efforts to give notice before material changes where required by law or contract. You may object to a new sub-processor on reasonable data-protection grounds.

Personal data may be processed in the United States and other countries where Quick Elements or its sub-processors operate. Where data-protection law requires transfer safeguards, we rely on appropriate mechanisms such as standard contractual clauses, data-processing agreements, provider commitments, and supplementary technical and organizational measures.

Taking into account the nature of the processing, we will provide reasonable assistance with data-subject requests, security obligations, data-protection impact assessments, regulator inquiries, and deletion or export requests. We may charge reasonable fees for assistance that is unusually burdensome or outside normal product functionality.

We will notify you without undue delay after becoming aware of a personal-data breach affecting personal data we process on your behalf. The notice will include available information about the nature of the incident, likely consequences, affected data, and measures taken or proposed, as the information becomes available.

We will make reasonable information available to demonstrate compliance with this addendum. Audits must be limited to what is necessary, conducted on reasonable notice, avoid disruption, protect confidential information and other customers, and occur no more than once per year unless a confirmed breach or legal requirement justifies more frequent review.

At the end of service, we will delete or return personal data according to your instructions, product functionality, backup cycles, legal-retention duties, audit needs, and dispute-resolution requirements. Data stored in backups may remain until the relevant backup expires or is overwritten.

This addendum is part of the Terms of Service. If there is a conflict, this addendum controls for data-processing issues, the Privacy Policy controls for Quick Elements controller processing, and a signed agreement controls over this online addendum where it expressly says so.