Data Processing Addendum

Version 2026-05-29 · Last updated May 29, 2026

This Data Processing Addendum ("DPA") forms part of the Terms of Service between RJ Auto and Car Detailing LLC ("Splendid Booking," "Processor") and the business that uses the Service ("Customer," "Controller"). It governs Splendid Booking's processing of personal data that the Customer or its end customers submit through the Service ("Customer Personal Data"). If there is a conflict on data-protection matters, this DPA controls.

1. Roles

The Customer is the controller of Customer Personal Data and is responsible for the lawfulness of collecting it and for providing required notices to its end customers. Splendid Booking is the processor and processes Customer Personal Data only to provide the Service and on the Customer's documented instructions (which include the Terms, this DPA, and use of the Service's features).

2. Details of processing

Subject matterProviding the appointment-booking Service.
DurationFor the term of the account, plus the deletion/return window in Section 8.
Nature & purposeHosting, storing, displaying, and transmitting booking and customer records; sending transactional and reminder emails on the Customer's behalf.
Types of personal dataEnd-customer name, email, phone, service address (for mobile services), appointment details, selected services/options, Customer-defined intake answers, and marketing opt-out status.
Categories of data subjectsThe Customer's end customers and the Customer's own staff/admin users.

The Customer must not submit special-category data (e.g., health, precise financial account, or government-ID data) except as expressly agreed in writing.

3. Processor obligations

4. Security measures

Splendid Booking maintains measures appropriate to the risk, currently including:

5. Subprocessors

The Customer authorizes Splendid Booking to engage the subprocessors below to provide the Service. Each is bound by terms protecting the data to a standard consistent with this DPA.

SubprocessorPurposeLocation
DigitalOceanCloud hosting (application + database)USA
CloudflareDNS and network/CDNUSA / global
Brevo (Sendinblue)Transactional & reminder email deliveryEU / USA
Backblaze B2Encrypted off-site database backupsUSA
StripePayment processing (only when paid billing is enabled)USA

We will give reasonable notice (e.g., by email or in the admin portal) before adding or replacing a subprocessor. If the Customer reasonably objects on data-protection grounds, the Customer may, as its sole remedy, terminate the affected part of the Service.

6. Personal data breach

Splendid Booking will notify the Customer without undue delay after becoming aware of a personal data breach affecting Customer Personal Data, and will provide information reasonably available to help the Customer meet its own notification obligations.

7. International transfers

The Service is provided for businesses operating in the United States and is not directed at data subjects in the EEA or UK. Where Customer Personal Data is transferred across borders, the parties will rely on a lawful transfer mechanism where required.

8. Return & deletion

On termination, the Customer may export its data from the admin portal and may request a final export within 30 days. After that, Splendid Booking will delete Customer Personal Data in the ordinary course, except for copies in routine encrypted backups, which age out on the rolling retention cycle, and any data we must retain by law.

9. Audits

On reasonable written request and no more than once per year (or as a regulator requires), Splendid Booking will make available information reasonably necessary to demonstrate compliance with this DPA.

10. Liability

Each party's liability under this DPA is subject to the limitations in the Terms of Service.

11. Contact

Data-protection contact: support@splendidbooking.com, RJ Auto and Car Detailing LLC, 10617 Cobblestone Dr, Spotsylvania, VA 22553.