Effective Date: July 2, 2026
This Data Processing Addendum (“DPA”) forms part of any agreement between Rodent Solutions, Inc. (“Company,” “Controller,” “we,” “our,” or “us”) and any customer, vendor, contractor, or service provider (“Processor”) that processes Personal Data on behalf of the Company.
This DPA establishes the parties’ respective rights and obligations regarding the processing of Personal Data in accordance with applicable data protection and privacy laws.
1. Definitions
For purposes of this DPA:
- Personal Data means any information relating to an identified or identifiable individual.
- Processing means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion, or destruction.
- Controller means the entity that determines the purposes and means of processing Personal Data.
- Processor means the entity processing Personal Data on behalf of the Controller.
- Applicable Privacy Laws include all applicable federal, state, and international privacy and data protection laws governing the processing of Personal Data.
2. Scope
This DPA applies whenever the Processor processes Personal Data on behalf of Rodent Solutions, Inc. in connection with providing products or services.
3. Nature of Processing
The Processor may process Personal Data solely for the purpose of:
- Providing contracted services
- Supporting business operations
- Hosting applications or websites
- Customer communications
- Appointment scheduling
- Payment processing
- Marketing support
- Analytics
- Technical support
Processing shall be limited to what is reasonably necessary to perform the agreed services.
4. Categories of Personal Data
Personal Data processed may include:
- Name
- Email address
- Telephone number
- Mailing or service address
- Property information
- Appointment information
- Customer communications
- IP address
- Device information
- Browser information
- Website usage information
- Billing information, when applicable
The Company does not intentionally collect sensitive personal information unless necessary to provide requested services.
5. Processor Obligations
The Processor agrees to:
- Process Personal Data only on documented instructions from the Company.
- Maintain the confidentiality of Personal Data.
- Ensure personnel with access to Personal Data are bound by confidentiality obligations.
- Implement appropriate technical and organizational security measures.
- Assist the Company in complying with applicable privacy laws where reasonably requested.
- Promptly notify the Company of any actual or suspected Personal Data breach.
- Maintain appropriate records of processing activities where required by law.
6. Security Measures
The Processor shall implement commercially reasonable safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, or destruction, including:
- Access controls
- Encryption where appropriate
- Secure authentication
- System monitoring
- Regular software updates
- Backup procedures
- Incident response procedures
7. Subprocessors
The Processor may engage subcontractors (“Subprocessors”) only where:
- Appropriate contractual protections are in place.
- The Subprocessor is capable of protecting Personal Data.
- The Processor remains responsible for the actions of its Subprocessors.
8. Data Subject Requests
Where applicable, the Processor shall reasonably assist the Company in responding to requests relating to:
- Access
- Correction
- Deletion
- Data portability
- Restriction of processing
- Objections to processing
The Processor shall not independently respond to such requests unless legally required.
9. Data Breach Notification
The Processor shall notify the Company without undue delay after becoming aware of a Personal Data breach involving Company data.
Such notification should include, where available:
- Description of the incident
- Categories of affected information
- Estimated number of affected individuals
- Steps taken to mitigate the incident
- Recommended actions, if any
10. Data Retention and Deletion
Upon termination of services, the Processor shall, at the Company’s direction:
- Return Personal Data; or
- Securely delete Personal Data,
unless retention is required by applicable law.
11. International Data Transfers
Where Personal Data is transferred across national borders, the parties shall implement appropriate safeguards required by applicable law.
12. Audit Rights
Upon reasonable request, the Processor shall provide information demonstrating compliance with this DPA, subject to appropriate confidentiality obligations.
13. Confidentiality
All Personal Data processed under this DPA shall be treated as confidential and shall not be disclosed except as required to perform contracted services or as required by law.
14. Limitation of Liability
Nothing in this DPA expands either party’s liability beyond the limitations contained in the applicable service agreement unless prohibited by law.
15. Governing Law
This DPA shall be governed by the laws of the State of Florida unless otherwise required by applicable privacy legislation or a written agreement between the parties.
16. Contact Information
Questions regarding this Data Processing Addendum may be directed to:
Rodent Solutions, Inc.
11523 Palm Brush Trail #191
Bradenton, FL 34202
Phone: (941) 704-0063
Email: rodentsolutionsinc@gmail.com
Website: https://rodentsolutioninc.com