1. Roles
Where customer personal data is processed through the platform, the customer is generally the controller and inSyncPetTransport acts as processor, unless a separate written agreement states otherwise.
2. Processing instructions
We process customer data to provide the service, support users, secure the platform, manage backups and comply with lawful instructions.
3. Sub-processors
Sub-processors may include hosting, email, payment, analytics, support and infrastructure providers. Customers should be given access to a current list before launch.
4. Security measures
Appropriate security measures may include encryption in transit, access controls, least-privilege permissions, monitoring, backups and operational controls.
5. Data subject requests
Where a request relates to customer data, we will assist the customer where reasonably possible and where required by applicable law.
6. Deletion or return
At the end of service, customer data may be returned, exported, deleted or retained according to the subscription settings, legal obligations and backup cycles.