Data Processing Addendum
Effective June 4, 2026 · Version 2026-06-04
This Data Processing Addendum ("DPA") supplements the agreement between you ("Customer") and DetailChimps regarding the processing of personal data covered by the EU General Data Protection Regulation (GDPR), the UK GDPR, and equivalent Canadian law. It applies automatically when DetailChimps processes personal data on Customer's behalf (for example, Fleet / corporate customers).
1. Definitions
"Controller", "Processor", "Personal Data", "Processing", and "Data Subject" have the meanings given in the GDPR. "Subprocessor" means any third party engaged by DetailChimps to process Personal Data under this DPA.
2. Roles
Customer is the Controller of Personal Data it submits to the Platform. DetailChimps is the Processor for that data and processes it solely on documented instructions from Customer (including by configuration choices in the Platform).
3. Scope of processing
- Subject matter: providing the DetailChimps Platform.
- Duration: the term of the agreement plus the retention periods in our Privacy Policy.
- Nature and purpose: enabling bookings, payments, communications, and analytics.
- Types of personal data: identifiers, contact info, vehicle, address, location, transaction data.
- Categories of data subjects: Customer's end users, drivers, and authorized staff.
4. Confidentiality and security
DetailChimps will (a) ensure personnel are bound by confidentiality; (b) implement appropriate technical and organizational measures as described on our Security page; (c) assist Customer in meeting its own GDPR security and breach-notification obligations.
5. Subprocessors
Customer authorizes DetailChimps to engage the subprocessors listed at /legal/subprocessors. We will give at least 30 days' notice of new subprocessors and Customer may object on reasonable data-protection grounds.
6. International transfers
For transfers of Personal Data out of the EEA, UK, or Switzerland, the parties incorporate the European Commission Standard Contractual Clauses (Module Two — Controller to Processor), Implementing Decision (EU) 2021/914, and the UK Addendum as applicable. DetailChimps is the data importer.
7. Data subject requests
DetailChimps will, taking into account the nature of the processing, assist Customer through appropriate technical and organizational measures, insofar as possible, to respond to requests from Data Subjects exercising their rights under applicable law.
8. Breach notification
DetailChimps will notify Customer without undue delay and in any event within 72 hours after becoming aware of a Personal Data Breach affecting Customer Data.
9. Audits
DetailChimps will make available to Customer all information reasonably necessary to demonstrate compliance with this DPA, and allow for audits, including inspections, conducted by Customer or an independent auditor mandated by Customer, no more than once per year, subject to confidentiality and reasonable notice.
10. Return or deletion
Upon termination, DetailChimps will, at Customer's choice, delete or return Personal Data, except where applicable law requires further retention.
11. Execution
To countersign this DPA on behalf of your organization, email DetailChimps@gmail.com. Acceptance of these Terms by an authorized signatory constitutes acceptance of this DPA on behalf of Customer.