Data processing agreement

Between you (the business renting the app, the controller) and XYZ app (the processor), for the personal data about your customers that the app holds for you. Version of 4 November 2026; it is part of the terms.

What is processed, and why

Names, addresses, phone numbers, email addresses, notes, bookings, quotes, invoices, payments, messages and photos about your customers — only to run the app for you: to show them to you, to send the documents and messages you tell it to send, to take a card payment you asked for, and to keep your books.

Our promises as your processor (UK GDPR Article 28)

• We process it only on your instructions, which are what you do in the app; never for anything of our own.
• Everyone with access is bound to confidentiality; that is one person, and the systems below.
• It is protected: sign-in by one-time code, every request bound to your business, encrypted in transit and at rest, weekly backups kept for 91 days, a restore drilled and dated.
• Sub-processors, each under its own terms: Cloudflare (hosting, database, files, sign-in), Resend (email), Stripe (card payments, only if you turn them on). We will tell you before adding one.
• Two lookup services are asked questions while the mileage log works out your miles: postcodes.io is sent a postcode to find where it is, and the OSRM routing service is sent two map points to measure the drive between them. Neither is sent a name, an address, or anything that says whose postcode it is, and neither holds anything for us — each answer is kept here so the same question is never asked twice.
• While the app watches your booked days for bad weather, postcodes.io is sent a postcode district (the first half of a postcode, such as GL18) to find its middle, and MET Norway's forecast service is sent that middle as a map point. Neither is sent a name, an address, a whole postcode or anything that says whose booking it is; the forecast is kept here for the morning and shared by every business working in that district.
• We help you answer your customers' rights: the app has a button to export, erase or correct any person's data, and the erasure reaches every table, the backups' retention and the outbox.
• A personal data breach is reported to you without undue delay, with what happened and what was done.
• When you leave, your data is exported for you if you ask and deleted after 90 days, at the weekly run that follows the 90th day; the weekly backups that hold it expire 91 days after they are written.
• You may ask what we hold and how it is protected, and we will show you.

Where

Your data is held in the UK and the EU (Cloudflare's network, Resend's EU region). Nothing is transferred elsewhere to be stored or worked on; the lookup services above answer a question and are told nothing about whose question it is.

Who we are, and how to ask

XYZ app is run by one person, a sole trader in Herefordshire, United Kingdom. Write to support@xyzapp.co.uk with anything about this agreement, a sub-processor, or a breach, and it reaches him.