Data Processing Agreement

Fields highlighted like [this] are details only the owner can supply. They must be completed before launch.

1. Parties

Controller: the groomer who holds a SnipRate account. Processor: [legal name], KvK [number], [address].

2. Subject, nature and purpose

We store and process client and pet records, appointments, online booking requests, quotes, photos and messages so that you can run your business with SnipRate. Duration: as long as your account exists.

3. Types of data and data subjects

• Data subjects: your clients and your employees.
• Data: names, email addresses, phone numbers, pet details (name, breed, notes, vaccination data, photos), appointment and quote history, messages you send.
• We do not intend to process special categories of data. Do not enter them in free-text fields.

4. Our obligations

• We process the data only on your documented instructions, which are your use of SnipRate and these terms, unless the law requires otherwise.
• Everyone with access to the data is bound to confidentiality.
• We apply appropriate technical and organisational measures: encrypted connections, access rules that limit each account to its own data, and restricted administrative access.
• We help you answer requests from data subjects and meet your own duties, to a reasonable extent and in the app where possible.
• We inform you without undue delay, and in any case within [48] hours, after becoming aware of a personal data breach affecting your data.
• On request or when your account ends, we delete or return your data, unless the law requires us to keep it.
• We give you the information needed to show compliance and allow reasonable audits, with notice and at your cost.

5. Sub-processors

You give general permission for the sub-processors below. We inform you of changes so you can object.

Sub-processor	Purpose	Location
[hosting and database provider]	Database, storage, hosting	[region]
[email provider]	Sending booking emails and reminders	[region]
Stripe	Payments (your data only, not your clients')	EU / US

6. Transfers outside the EEA

If a sub-processor processes data outside the EEA, we ensure an adequate safeguard, such as an adequacy decision or standard contractual clauses.

7. Your obligations as controller

You are responsible for having a lawful basis for the data you enter, for informing your clients, and for the content you store.

8. Liability and law

The liability limits in the Terms of Service apply. Dutch law applies.

9. Contact

Privacy questions: [privacy email].