Data Processing Agreement

1. Scope

This DPA governs the processing of personal data by ClickBuild as data processor on behalf of the customer as data controller.

2. ClickBuild Obligations

• Process data only per customer instructions
• Implement appropriate technical and organizational security measures
• Notify the customer within 72 hours of discovering a data breach
• Delete or return customer data upon contract termination

3. Sub-processors

We may use trusted service providers (servers, email) to deliver the service. Customers are notified in advance of any changes.

4. Compliance

ClickBuild complies with data protection requirements under the Saudi Personal Data Protection Law (PDPL).