Parties, roles & priority
This addendum supplements the service agreement between Good Ground, LLC and the subscribing business when we process personal information on its behalf. The business is the controller or business; Good Ground is the processor or service provider for that activity. Each party remains responsible for obligations assigned to it by applicable data-protection law. This addendum controls a conflict concerning processing on behalf of the client.
Processing schedule
| Purpose | Provide the ordered website, CRM, communications, scheduling, automations and support. |
|---|---|
| People | Client personnel, customers, leads, website visitors and communication recipients. |
| Data | Contact details, business records, messages, appointments, consent and interaction records supplied through the service. |
| Operations | Collection, storage, organization, transmission, retrieval, support, export and deletion as instructed. |
| Duration | The service term and contractual export period, subject to required retention and backup deletion cycles. |
Instructions & restrictions
The service order, authorized account settings and written support instructions document the client’s instructions. Good Ground will process client data for those purposes or a legally required purpose and will notify the client of a legal requirement where permitted. We will identify an instruction we reasonably believe violates applicable law.
We will not sell client personal information, use it for unrelated advertising or disclose it outside the direct service relationship except as permitted by law. We will not combine it with unrelated datasets except for a permitted service or security purpose. The client must have the notices, permissions and authority needed for its instructions.
Personnel, security & incidents
Access will be limited to authorized personnel with confidentiality duties. We will maintain measures appropriate to the risk, including controlled access, protected transmission, account safeguards and incident handling.
If we become aware of a breach affecting client personal information, we will notify the client without undue delay and provide available details needed for its response, with further updates as facts emerge. We will cooperate in reasonable containment and remediation. An incident notice is not an admission of liability.
Subprocessors
The client authorizes providers needed to deliver its selected services, listed in our provider register. We will require appropriate written data-protection commitments and remain responsible for delegated processing obligations under this agreement. We will give 30 days’ notice of a material new subprocessor where practicable, or prompt notice if security or legal urgency prevents advance notice. Contact [email protected] with a reasonable data-protection objection so we can assess an alternative.
Rights, assistance & review
We will reasonably assist with consumer requests, security information and assessments required by applicable law, considering the service and information available to us. A request concerning client-controlled records will be referred to the client unless law requires a direct response. We will not independently change the client’s legal response.
On reasonable request, we will provide information to demonstrate these commitments. Where an audit is legally required, the parties will agree on reasonable scope, timing and confidentiality that protect other clients and system security. The client may take reasonable steps to address unauthorized processing.
Return, deletion & transfers
At the end of service, the client may request return or deletion of its data within the export period. We may retain records required by law and protect them against unrelated use. Backups are removed through ordinary retention cycles rather than immediately rewritten.
Processing may involve providers outside the client’s jurisdiction. Where transfer law requires a specific safeguard, the parties must put it in place before that transfer. This addendum does not itself incorporate an unexecuted international transfer instrument.
Contact & agreement
The service agreement’s liability provisions apply unless prohibited by applicable law. Contact [email protected] for processing questions and [email protected] for an executed agreement or amendment.
Good Ground, LLC
P.O. Box 113
Williamstown, KY, USA
Legal: [email protected]
Privacy: [email protected]