Data Processing Addendum (DPA)

Last updated: Nov 20, 2025

Other policies you may wish to review:  Privacy Policy | Cookie Policy | Terms of Use | Data & AI Transparency Statement | Beta Participation

This Data Processing Addendum (“DPA”) supplements the agreement between reGEN Impact Media (“Processor”) and any organization or entity using reGEN services (“Controller”).

1. Purpose

This DPA outlines how reGEN processes personal data on behalf of the Controller in compliance with Canadian privacy law and applicable global standards.

2. Roles

  • The Controller determines the purpose and means of processing.

  • reGEN acts as the Processor, handling data only as instructed by the Controller.

3. Processor Obligations

reGEN will:

  • Process data only on documented instructions

  • Maintain appropriate security measures

  • Report data breaches without undue delay

  • Assist with data subject access requests

  • Delete or return personal data upon request

  • Ensure staff are trained in data protection

4. Sub-processors

reGEN may use vetted third-party providers (e.g., hosting, analytics, email services). A current list is available upon request.

5. International Transfers

Data may be stored or processed in Canada, the US, or other jurisdictions with adequate safeguards.

6. Retention

Data is retained only as long as necessary for agreed-upon purposes.

7. Termination

Upon termination of services, reGEN will return or securely delete personal data unless legally required to retain it.

8. Contact

privacy@regenimpactmedia.com

Posted in

engage