A Division of Bizconnexity (Pty) Ltd
Registration No: 2025/234941/07
Effective Date: 1 March 2026

1. INTRODUCTION & SCOPE

Managing digital growth requires access to sensitive data. This Data Processing Agreement (“DPA”) governs the relationship between Easy Rank (the “Operator”) and the Client (the “Responsible Party”) regarding the processing of personal information. This document ensures that both parties comply with the Protection of Personal Information Act 4 of 2013 (POPIA).

2. DEFINITIONS

• “Responsible Party”: The Client who determines the purpose of and means for processing personal information.
• “Operator”: Easy Rank, who processes personal information for the Responsible Party in terms of a contract or mandate.
• “Personal Information”: As defined in POPIA, including but not limited to customer lists, login credentials, and lead data.
• “AI Tools”: Artificial Intelligence platforms, Large Language Models (LLMs), and automated processing software used by Easy Rank for research, content generation, and SEO analysis.

3. MANDATE & PURPOSE OF PROCESSING

Easy Rank is mandated to process information solely for the following purposes:

• Executing SEO, website design, and Google Business Profile audits.
• Developing and deploying AI-driven marketing strategies.
• Managing digital advertising, social media, and lead generation campaigns.
• Technical maintenance and hosting of the Responsible Party’s digital assets.

4. OPERATOR OBLIGATIONS (EASY RANK)

In compliance with Section 19 to 21 of POPIA, Easy Rank agrees to:

• Confidentiality: Treat all personal information as strictly confidential.
• Security Measures: Implement technical and organizational measures to prevent unauthorized access or accidental loss of data.
• Notification: Notify the Responsible Party immediately upon discovery of any suspected or actual data breach.
• Staff Integrity: Ensure all employees and contractors are bound by non-disclosure and data privacy agreements.

5. ADVANCED AI DATA USAGE & PRIVACY

To maximize “AI Visibility” and SEO performance, Easy Rank utilizes cutting-edge AI technologies. We adhere to the following AI Safety Standards:

• Data Anonymization: Before feeding business data into third-party AI models (e.g., OpenAI, Claude, Gemini) for strategy development, Easy Rank strips away direct identifiers (Personally Identifiable Information) wherever possible.
• Opt-Out of Training: Easy Rank utilizes “Team” or “Enterprise” tiers of AI tools where available, ensuring that Client data is not used to train global AI models.
• Content Humanization: All AI-generated content is reviewed and refined by human specialists to ensure accuracy, E-E-A-T compliance, and brand integrity.
• No PII in Prompts: Sensitive personal data (names, addresses, IDs) of the Client’s customers is never intentionally used as training “prompts” in public AI environments.

6. SUB-OPERATORS

The Responsible Party grants Easy Rank general authorization to engage sub-operators (e.g., cloud hosting providers, API tools, SEO software). Easy Rank ensures these sub-operators are bound by data protection terms no less stringency than those in this DPA.

7. ACCESS TO EXTERNAL ASSETS

The Responsible Party will grant Easy Rank access to:

• Google Business Profile & Search Console.
• WordPress Admin Panels.
• Social Media Business Managers.
• Analytics and Lead Tracking software.

Easy Rank utilizes these permissions solely for performative growth and will revoke access or transfer ownership back to the Client upon termination of the service agreement.

8. DATA RETENTION & RETURN

Upon completion of the service contract, Easy Rank will:

• Cease processing the personal information.
• Return or securely delete files containing personal information, except where South African law requires continued retention for auditing or legal purposes.

9. COMPLIANCE & AUDIT

Easy Rank shall make available to the Responsible Party all information necessary to demonstrate compliance with the obligations laid down in this DPA and POPIA.

10. INDEMNITY

The Responsible Party warrants that all data provided to Easy Rank was collected lawfully. Easy Rank is not liable for legal repercussions arising from the Responsible Party’s failure to secure initial consent from their data subjects.