This document forms part of the Apex Thunder Terms of Service. Review it together with the other policies that apply to your Service.
Roles and scope
This DPA applies when Apex Thunder processes personal data on behalf of a customer in connection with the Services. The customer is normally the controller and Apex Thunder the processor. Apex Thunder remains an independent controller for its own billing, security, fraud prevention, and legal records.
Processing instructions and customer duties
Apex Thunder processes personal data according to documented customer instructions, the service agreement, and applicable law. The customer must have a lawful basis, give valid instructions, provide required notices, handle data-subject rights, and avoid placing prohibited or unnecessary sensitive data in the Services.
Confidentiality and security
Authorized personnel are subject to confidentiality obligations. Apex Thunder uses technical and organizational measures appropriate to risk, including access controls, network protections, monitoring, resilience, and operational security. No measure eliminates all risk.
Subprocessors and international transfers
Apex Thunder may use vetted subprocessors for infrastructure, support, communications, security, or service delivery and remains responsible for imposing appropriate data-protection obligations. International transfers use lawful mechanisms and safeguards where required.
Data-subject requests and incidents
Taking account of the nature of processing, Apex Thunder may reasonably assist the customer with data-subject requests, compliance inquiries, and personal-data breaches. Confirmed breaches affecting customer personal data are communicated without undue delay where applicable, subject to available information and legal restrictions.
Return, deletion and audits
At the end of Services, customer personal data is returned or deleted according to the service, instructions, retention systems, backups, and applicable law. Reasonable compliance information may be provided, while audits must protect security, confidentiality, other customers, and operational continuity.
Final notice and contact
Apex Thunder may revise this document to reflect changes in law, Services, security, or operations. The current version is published in the Legal Center. Use the official Contact page for questions.
Contact Apex Thunder