Data Processing Addendum

1. Roles

For personal data contained in Customer Data, the Customer is the controller and FleetBlocks is the processor. FleetBlocks processes such data only on the Customer’s documented instructions, including as set out in the Terms and this DPA.

2. Scope of processing

• Subject matter: provision of the FleetBlocks Service.
• Duration: the term of the subscription plus any limited export window.
• Nature & purpose: hosting, dispatch, tracking, document handling, finance and related features.
• Data subjects: the Customer’s staff, drivers, customers and contacts.
• Data types: contact details, operational records, location/telematics, documents and related data.

3. Our obligations

• Process personal data only on documented instructions.
• Ensure persons authorized to process data are bound by confidentiality.
• Implement appropriate technical and organizational security measures (see our Security Overview).
• Assist the Customer with data-subject requests and, where applicable, with impact assessments and breach notifications.
• Notify the Customer without undue delay after becoming aware of a personal-data breach.

4. Subprocessors

The Customer authorizes FleetBlocks to engage the subprocessors listed at /legal/subprocessors, each bound by data-protection terms no less protective than this DPA. We will provide a mechanism to notify Customers of changes and allow reasonable objection.

5. International transfers

Where personal data is transferred across borders, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms recognized under applicable law (including the GDPR and the PDPA of Malaysia/Singapore).

6. Deletion & return

On termination, and at the Customer’s choice, we will delete or return Customer personal data within a commercially reasonable period, except where retention is required by law.

7. Audits

We will make available information reasonably necessary to demonstrate compliance with this DPA and allow for audits subject to appropriate confidentiality and scheduling.

8. Contact

Data-protection enquiries: privacy@fleetblocks.com.