LEGAL

Data Processing Addendum

Last updated: 15 August 2026. This DPA forms part of the agreement between Hangar and its customer where Hangar processes personal data on the customer’s behalf.

Scope and instructions

The customer is the controller and Hangar is the processor for customer content. Hangar processes personal data solely to provide, secure, support, and improve the contracted service, on documented customer instructions, unless required by law.

Confidentiality and security

Hangar ensures authorised personnel are bound by confidentiality obligations and implements appropriate technical and organisational measures, including encryption in transit and at rest, access controls, and incident-management procedures.

Subprocessors

Hangar may use subprocessors for infrastructure and essential service operations. Customers receive notice of material changes and a reasonable opportunity to object as described in the signed DPA.

Assistance, breaches, and deletion

Hangar reasonably assists the customer with data-subject requests. It notifies the customer without undue delay after becoming aware of a breach affecting customer data, and returns or deletes data at the end of the service unless retention is required by law.

Audit and contact

Customers may request the current signed DPA and audit information at privacy@hangar.example. The signed DPA controls if it differs from this summary.