1. Scope
This addendum applies where a business customer provides personal data of its clients or employees, such as office locations and departure windows, for Imperibuild to produce reports.
2. Roles
The customer decides why the data is processed. Imperibuild processes it only to produce and deliver the reports the customer orders, under the Digital Personal Data Protection Act, 2023 and its Rules as they apply.
3. Minimum data
Relocation reports need only the office location and departure windows. A home address is processed only if the employee chooses to add one. Developers never receive buyer data.
4. Security
Data is hosted in India and encrypted in transit and at rest. Access is limited to staff who need it. See the security page.
5. Subprocessors
We use a cloud host, a routing data provider (which receives coordinates only, never names or numbers) and a messaging provider for WhatsApp and email delivery. The current list is available on request.
6. Deletion and return
On termination, or on request, we delete or return customer personal data, except where the law requires us to keep it.