Data Processing Addendum (DPA)

Data Processing Addendum (DPA)

Effective Date: July 3, 2026

1. Introduction

This Data Processing Addendum (“DPA”) forms part of any agreement between Bird Solutions, Inc. (“Company,” “Processor,” “we,” “our,” or “us”) and the customer, client, or organization (“Controller,” “Customer,” or “you”) where Bird Solutions, Inc. processes Personal Data on behalf of the Customer.

This DPA is intended to satisfy applicable data protection laws, including, where applicable:

  • General Data Protection Regulation (EU) 2016/679 (“GDPR”)
  • UK General Data Protection Regulation (“UK GDPR”)
  • California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”)
  • Other applicable U.S. state privacy laws
  • Other applicable data protection legislation

If there is any conflict between this DPA and the underlying services agreement, this DPA shall govern with respect to the processing of Personal Data.

2. Definitions

For purposes of this DPA:

Controller means the entity that determines the purposes and means of processing Personal Data.

Processor means Bird Solutions, Inc., which processes Personal Data on behalf of the Controller.

Personal Data means any information relating to an identified or identifiable natural person, as defined under applicable privacy laws.

Processing means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion, or destruction.

Subprocessor means any third party engaged by Bird Solutions, Inc. to assist in processing Personal Data.

3. Scope

This DPA applies whenever Bird Solutions, Inc. processes Personal Data on behalf of a Customer in connection with services we provide.

Typical processing activities may include:

  • Responding to service inquiries
  • Scheduling inspections
  • Preparing proposals and estimates
  • Customer communications
  • Project management
  • Website contact forms
  • Marketing communications (when authorized)
  • Customer relationship management (CRM)
  • Technical support

4. Nature and Purpose of Processing

Bird Solutions, Inc. processes Personal Data solely for purposes necessary to provide requested services and fulfill contractual obligations.

Processing activities may include:

  • Collecting contact information
  • Communicating with customers
  • Scheduling appointments
  • Managing projects
  • Maintaining customer records
  • Providing customer support
  • Sending requested communications
  • Meeting legal and regulatory obligations

5. Categories of Personal Data

Depending upon the services provided, Personal Data processed may include:

  • Name
  • Company name
  • Job title
  • Email address
  • Telephone number
  • Business address
  • Mailing address
  • Service location
  • Billing information
  • Communications
  • Customer correspondence
  • Website usage information
  • IP address
  • Device information
  • Online identifiers

Bird Solutions, Inc. does not intentionally collect special categories of Personal Data unless specifically required and authorized by the Customer.

6. Categories of Data Subjects

Personal Data may relate to:

  • Customers
  • Prospective customers
  • Business owners
  • Property managers
  • Facility managers
  • Employees of customer organizations
  • Vendors
  • Contractors
  • Authorized representatives
  • Website visitors

7. Customer Responsibilities

The Customer represents and warrants that:

  • It has all necessary authority to provide Personal Data to Bird Solutions, Inc.
  • It has provided any legally required privacy notices.
  • It has obtained any required consents.
  • Its instructions comply with applicable laws.

The Customer remains responsible for determining the lawful basis for processing Personal Data.

8. Processor Obligations

Bird Solutions, Inc. agrees to:

  • Process Personal Data only on documented instructions from the Customer.
  • Process Personal Data only for authorized purposes.
  • Maintain appropriate confidentiality obligations.
  • Implement reasonable administrative, technical, and organizational safeguards.
  • Assist the Customer in meeting applicable legal obligations where reasonably required.
  • Notify the Customer of confirmed Personal Data breaches where required by law.

9. Confidentiality

Bird Solutions, Inc. will ensure that personnel with access to Personal Data are subject to appropriate confidentiality obligations through employment agreements, contractual commitments, or company policies.

Access to Personal Data is limited to personnel who require such access to perform their job responsibilities.

10. Security Measures

Bird Solutions, Inc. maintains reasonable administrative, technical, and physical safeguards appropriate to the nature of the Personal Data processed.

Security measures may include:

  • Access controls
  • Password protection
  • Multi-factor authentication where appropriate
  • Secure cloud services
  • Firewall protection
  • Malware protection
  • Encryption where appropriate
  • Secure backup procedures
  • Employee security awareness practices

No method of transmission or storage can be guaranteed to be completely secure.

11. Subprocessors

Bird Solutions, Inc. may engage trusted third-party service providers (“Subprocessors”) to assist in providing services.

Examples may include providers of:

  • Website hosting
  • Cloud infrastructure
  • Customer relationship management (CRM)
  • Email services
  • Marketing platforms
  • Analytics services
  • Technical support
  • Payment processing (if applicable)

Bird Solutions, Inc. will use commercially reasonable efforts to engage Subprocessors that maintain appropriate security measures.

12. International Data Transfers

If Personal Data is transferred outside the country in which it was collected, Bird Solutions, Inc. will take commercially reasonable steps to ensure such transfers comply with applicable data protection laws.

Where required, appropriate contractual safeguards may be used.

13. Assistance with Data Subject Requests

Where legally required and reasonably feasible, Bird Solutions, Inc. will assist the Customer in responding to requests concerning:

  • Access
  • Correction
  • Deletion
  • Restriction of processing
  • Data portability
  • Objections to processing

The Customer remains responsible for responding to such requests.

14. Data Breach Notification

If Bird Solutions, Inc. becomes aware of a confirmed Personal Data breach affecting Customer data, we will notify the Customer without undue delay when notification is required by applicable law.

Notification may include, where available:

  • Nature of the incident
  • Categories of affected information
  • Known or anticipated consequences
  • Mitigation efforts undertaken
  • Recommended protective measures

15. Data Retention and Deletion

Bird Solutions, Inc. retains Personal Data only for as long as necessary to:

  • Provide requested services
  • Meet contractual obligations
  • Maintain business records
  • Comply with legal requirements
  • Resolve disputes
  • Enforce agreements

Upon termination of applicable services, Personal Data may be deleted or anonymized in accordance with our record retention policies unless retention is required by law.

16. Audits and Information Requests

Upon reasonable written request, Bird Solutions, Inc. may provide information regarding its data protection practices sufficient to demonstrate compliance with this DPA, subject to:

  • Protection of confidential information
  • Security requirements
  • Attorney-client privilege
  • Applicable legal restrictions

Any audit shall be conducted during normal business hours and in a manner that minimizes disruption to business operations.

17. Limitation of Liability

The liability of each party under this DPA shall be governed by the limitation of liability provisions contained in the applicable services agreement, unless prohibited by applicable law.

18. Changes to This DPA

Bird Solutions, Inc. may update this Data Processing Addendum to reflect changes in applicable laws, technology, business operations, or industry practices.

Updated versions will be posted with a revised Effective Date.

19. Contact Information

Questions regarding this Data Processing Addendum or our data protection practices may be directed to:

Bird Solutions, Inc.

4654 East State Road 64 #221

Bradenton, FL 34208

Phone: (941) 900-8393

Email: birdsolutionsinc@gmail.com

Website: https://www.birdsolutionsinc.com/

Appendix A – Processing Details

Subject Matter

Processing of Personal Data necessary to provide commercial bird control services and related customer support.

Duration

For the term of the applicable services agreement and any legally required retention period.

Nature of Processing

  • Collection
  • Recording
  • Organization
  • Storage
  • Consultation
  • Use
  • Transmission
  • Maintenance
  • Deletion
  • Destruction

Purpose

Providing requested services, communicating with customers, scheduling inspections, preparing estimates, managing projects, maintaining customer relationships, and complying with legal obligations.

Types of Personal Data

  • Contact information
  • Business information
  • Service requests
  • Website interaction data
  • Communications
  • Billing information (where applicable)

Categories of Data Subjects

  • Customers
  • Prospective customers
  • Website visitors
  • Business representatives
  • Vendors
  • Contractors
  • Employees of customer organizations

Technical and Organizational Measures

Bird Solutions, Inc. maintains reasonable safeguards appropriate to the risks associated with the processing of Personal Data, including access controls, secure systems, employee confidentiality obligations, data security practices, and commercially reasonable measures designed to protect Personal Data against unauthorized access, disclosure, alteration, or destruction.