Legal

Data Processing Addendum

Effective June 1, 2026

This Data Processing Addendum ("DPA") supplements the Terms of Service between SparrowHawk CRM LLC ("Processor") and the Customer ("Controller") and governs the processing of personal data through the SparrowHawk CRM platform.

Data Ownership

Customer retains all rights, title, and interest in Customer Data. SparrowHawk CRM processes Customer Data solely to provide the Services.

Data Retention

Customer Data is retained for the duration of the subscription. Following termination, Customer Data is retained for a limited period to allow export before deletion.

Data Deletion Requests

Customer may request deletion of Customer Data at any time by contacting alex@sparrowhawkmobiledetailing.com. Deletion is performed within a commercially reasonable period.

Subprocessor Relationships

SparrowHawk CRM uses vetted subprocessors (including Stripe, cloud hosting providers, and email delivery providers) bound by contractual obligations consistent with this DPA.

Security Responsibilities

SparrowHawk CRM implements technical and organizational measures designed to protect Customer Data, as further described on our Security page.

Customer Responsibilities

Customer is responsible for managing user access, ensuring lawful basis for processing data uploaded to the platform, and configuring features in accordance with applicable law.