Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Terms of Service between FIXMYFAULT™ ("Company") and the Trade Professional or Homeowner ("User") acting as a Controller or Processor of Personal Data via the FixMyFault™ Platform.

1. Scope & Role Distinction

This agreement applies to all "Personal Data" processed by the Company on behalf of the User in the provision of trade matching and emergency repair services. Role Clarity: For Homeowners, FIXMYFAULT™ acts primarily as a Data Controller. For Trade Professionals, the Company acts as a Data Processor regarding the facilitation of leads and customer interactions.

2. Processing Obligations

• Instruction Based: Company shall only process Personal Data on documented instructions from the User (e.g., active booking requests).
• Confidentiality: All personnel authorized to process data are committed to strict confidentiality and subject to internal vetting.
• Sub-processing: Company utilizes trusted sub-processors (e.g., BulkSMS, Brevo, Ionos, Stripe) for critical service delivery.

3. Security Measures (The "Forensic Standard")

We implement robust technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption: AES-256 at-rest and TLS 1.3 in-transit encryption.
• MFA Enforcement: Mandatory Multi-Factor Authentication for all trade and customer accounts via the AlertVector™ engine.
• Security Incident Ledger: A formal recording and mitigation system for all suspected breaches or anomalies.
• Auditor Pack: On-demand generation of forensic activity logs for regulatory inspection (ICO compliance).

4. Data Subject Rights

Company shall assist Users in fulfilling their obligations to respond to requests for exercising Data Subject rights (Access, Erasure, Portability) via the built-in Privacy Tools in the account dashboard.

5. Term and Termination

Upon termination of processing services, Company shall, at the choice of the User, delete or return all Personal Data, unless retention is required by UK law.