Data Processing Addendum

1. Introduction

This Data Processing Addendum ("DPA") supplements the Privacy Policy and Terms of Service of ZT Nation, LLC ("ZT Nation," "we," "us," or "our"). It describes how we collect, process, store, and protect personal data in connection with the ZT Nation platform (the "Platform"). This DPA applies to all users of the Platform, including contractors, customers, and visitors.

2. Definitions

• "Personal Data" means any information that identifies, relates to, describes, or could reasonably be linked to an identified or identifiable individual, including but not limited to name, email address, phone number, physical address, IP address, and geolocation data.
• "Processing" means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" means ZT Nation, which determines the purposes and means of Processing Personal Data.
• "Data Processor" or "Sub-Processor" means any third party that Processes Personal Data on behalf of ZT Nation.

3. Data We Collect and Process

4. Sub-Processors

ZT Nation uses the following third-party sub-processors to deliver Platform services. Each sub-processor has been evaluated for data protection compliance:

We will notify users of any material changes to our sub-processor list by updating this DPA. We require all sub-processors to enter into data processing agreements that provide at least the same level of data protection as this DPA.

5. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active accounts: Data is retained for the duration of the account relationship
• Closed accounts: Data is retained for up to 7 years after account closure for legal and tax compliance purposes
• Communication records: SMS and email records are retained for up to 5 years for TCPA compliance and dispute resolution
• Compliance documents: Contractor licenses, insurance certificates, and compliance verification records are retained for 7 years
• Analytics data: Anonymized, aggregated analytics data may be retained indefinitely

6. Data Security

ZT Nation implements appropriate technical and organizational measures to protect Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication requirements for all system access
• Regular security assessments and monitoring
• Employee and contractor access limited to data necessary for their role
• Incident response procedures for data breaches

7. Data Subject Rights

Depending on your jurisdiction, you may have the following rights regarding your Personal Data:

• Right to Access: Request a copy of the Personal Data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your Personal Data, subject to legal retention requirements
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Non-Discrimination: Exercise your privacy rights without receiving discriminatory treatment

To exercise any of these rights, contact us at [email protected]. We will respond within 45 days (or as required by applicable law). See our Privacy Policy for additional details on state-specific privacy rights.

8. Data Breach Notification

In the event of a data breach that affects your Personal Data, ZT Nation will:

• Notify affected individuals within 72 hours of becoming aware of the breach (or as required by applicable state law, whichever is sooner)
• Provide details about the nature of the breach, the data affected, and the steps we are taking to address it
• Notify relevant regulatory authorities as required by law
• Take immediate steps to contain and remediate the breach

9. International Data Transfers

ZT Nation currently processes all data within the United States. All sub-processors listed in Section 4 are based in the United States. If we begin transferring data internationally in the future, we will implement appropriate safeguards (such as Standard Contractual Clauses) and update this DPA accordingly.

10. Contact Information

For questions about this DPA or our data processing practices:

• Email: [email protected]
• Privacy Policy: ztnation.us/privacy