Data Processing Addendum

Data Processing Addendum (DPA)

Website: https://www.wymanplumbing.com/
Effective Date: July 24, 2026
Last Updated: July 24, 2026

Data Processing Addendum

This Data Processing Addendum (“DPA“) forms part of the agreement between Wyman Plumbing (“Company,” “we,” “our,” or “us“) and any customer, client, business partner, or other organization (“Customer“) that provides or makes available Personal Data in connection with the use of our website, https://www.wymanplumbing.com/, or our plumbing services.

This DPA applies when Wyman Plumbing processes Personal Data on behalf of a Customer and is intended to reflect applicable data protection laws where they apply.

1. Definitions

For purposes of this DPA:

Applicable Data Protection Laws means all applicable privacy and data protection laws governing the processing of Personal Data, including, where applicable:

• General Data Protection Regulation (EU) 2016/679 (“GDPR”)
• UK GDPR
• California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)
• Other applicable U.S. state privacy laws
• Any successor legislation

Controller means the entity that determines the purposes and means of processing Personal Data.

Processor means the entity that processes Personal Data on behalf of a Controller.

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation performed on Personal Data, including collection, storage, use, disclosure, deletion, or transmission.

2. Scope

This DPA governs Personal Data processed by Wyman Plumbing in connection with:

• Website inquiries
• Contact forms
• Estimate requests
• Service scheduling
• Customer communications
• Billing and invoicing
• Customer support
• Business operations
• Marketing communications where permitted by law

3. Roles of the Parties

Depending on the nature of the services provided:

• Wyman Plumbing may act as a Controller when collecting Personal Data directly from customers for its own business purposes.
• Wyman Plumbing may act as a Processor when processing Personal Data solely on behalf of a Customer pursuant to written instructions.

Nothing in this DPA alters the legal responsibilities assigned under applicable law.

4. Categories of Personal Data

The Personal Data processed may include:

• Name
• Business name
• Email address
• Telephone number
• Mailing address
• Service address
• Billing information
• Appointment details
• Project information
• Communications with our staff
• IP address
• Device information
• Website usage data
• Any information voluntarily submitted through our Website

5. Categories of Data Subjects

Data subjects may include:

• Residential customers
• Commercial customers
• Prospective customers
• Website visitors
• Vendors
• Contractors
• Business representatives
• Employees of Customer organizations (where applicable)

6. Purpose of Processing

Personal Data may be processed for purposes including:

• Providing plumbing services
• Responding to inquiries
• Scheduling appointments
• Preparing estimates
• Processing payments
• Customer support
• Website administration
• Security monitoring
• Legal compliance
• Marketing communications where permitted
• Internal business operations

7. Processing Instructions

When acting as a Processor, Wyman Plumbing shall:

• Process Personal Data only on documented instructions from the Customer, unless otherwise required by applicable law.
• Promptly notify the Customer if we believe an instruction violates applicable data protection laws.
• Limit processing to the purposes described in the applicable agreement.

8. Confidentiality

Wyman Plumbing requires employees, contractors, and authorized personnel who process Personal Data to maintain the confidentiality of such information.

Access to Personal Data is limited to individuals with a legitimate business need.

9. Security Measures

Wyman Plumbing maintains reasonable administrative, technical, and physical safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, or destruction.

Security measures may include:

• Secure website hosting
• Encrypted data transmission using SSL/TLS where appropriate
• Password-protected systems
• Limited employee access
• Firewall and network protections
• Security monitoring
• Regular software updates
• Backup procedures
• Vendor security reviews where appropriate

No security system is completely immune from risk, and absolute security cannot be guaranteed.

10. Subprocessors

Wyman Plumbing may engage trusted third-party service providers (“Subprocessors”) to assist in delivering services.

Examples may include:

• Website hosting providers
• Cloud service providers
• Email providers
• Customer relationship management (CRM) platforms
• Payment processors
• IT support providers
• Marketing service providers
• Analytics providers

We require Subprocessors to maintain appropriate safeguards for Personal Data consistent with applicable law.

11. International Data Transfers

Personal Data may be processed or stored in the United States or other jurisdictions where our service providers operate.

Where required by applicable law, appropriate safeguards will be implemented for international transfers of Personal Data.

12. Data Retention

Personal Data will be retained only for as long as necessary to:

• Provide requested services
• Fulfill contractual obligations
• Maintain business records
• Resolve disputes
• Enforce agreements
• Comply with legal and regulatory requirements

When no longer required, Personal Data will be securely deleted or anonymized where appropriate.

13. Assistance with Data Subject Requests

Where required by applicable law and appropriate to our role, Wyman Plumbing will provide reasonable assistance to Customers in responding to requests involving:

• Access
• Correction
• Deletion
• Data portability
• Restriction of processing
• Objection to processing

14. Personal Data Breaches

If Wyman Plumbing becomes aware of a confirmed Personal Data breach affecting Personal Data processed on behalf of a Customer, we will notify the Customer without undue delay when required by applicable law.

Notification may include:

• Nature of the breach
• Categories of affected information
• Known or anticipated consequences
• Steps taken to mitigate the incident
• Recommended actions where appropriate

15. Audits

Where required by applicable law or contract, and subject to reasonable confidentiality protections, Wyman Plumbing may provide information reasonably necessary to demonstrate compliance with this DPA.

Any audit requests must:

• Be reasonable in scope.
• Avoid disruption to business operations.
• Protect confidential information.
• Be subject to appropriate confidentiality obligations.

16. Return or Deletion of Data

Upon termination of services, Wyman Plumbing will, where applicable and subject to legal retention obligations:

• Return Personal Data to the Customer; or
• Securely delete or anonymize Personal Data.

Certain information may be retained where required by law or for legitimate business purposes.

17. Liability

Nothing in this DPA expands either party’s liability beyond the limitations contained in any applicable service agreement, except where prohibited by applicable law.

18. Governing Law

This DPA shall be governed by the laws of the State of Florida, unless another governing law is required by applicable data protection legislation.

19. Changes to This DPA

We may update this Data Processing Addendum from time to time to reflect:

• Changes in applicable laws
• New business practices
• Technological developments
• Service enhancements

Updated versions will be posted on this page with a revised “Last Updated” date.

20. Contact Information

Questions regarding this Data Processing Addendum or our data processing practices may be directed to:

Wyman Plumbing

3002 Cortez Road
Bradenton, FL 34207

Phone: (941) 755-1595

Email: blythe@wymanplumbinginc.com

Website: https://www.wymanplumbing.com/