Processor Addendum.

Ordinary business contact details in the licensed data (names, work emails and phone numbers of employees, customers and suppliers in their business roles) are delivered as they are, rather than replaced with consistent pseudonyms. Everything else the full scrub removes is still removed: secrets and credentials, payment data, health and other sensitive categories, the owner's never-share list and the seller's identity.

1. Buyer processes that personal data on the owner's documented instructions, which are the license's permitted use, and for no other purpose. The Data Processing Addendum applies to it as if Buyer were data.cool's subprocessor.
2. Buyer will not contact, profile or re-identify any person in the data, or combine it with other data to do so, and will not use it to make decisions about any person.
3. Buyer keeps it under access control and encryption, limits it to staff and contractors who need it and are bound to confidentiality, and keeps a record of who has had access.
4. On a request from data.cool (for an owner, or for a person exercising their rights), Buyer deletes or corrects the records named within 30 days and confirms in writing. That includes copies held by downstream recipients.
5. Buyer notifies privacy@data.cool within 72 hours of becoming aware of a personal data breach, and cooperates in the response.

Buyer passes light-scrub data to a downstream recipient only if that recipient is on Buyer's list and has signed terms at least as protective as this addendum. Transfers out of the country where the data was handed over follow the transfer terms of the DPA.

On reasonable notice, and no more than once a year unless there is a breach, Buyer answers data.cool's written questions about its handling of light-scrub data and makes its access records available.