1. Roles
For Customer Personal Data uploaded to a Haulora workspace, the customer is typically the controller (or business) and Haulora is the processor (or service provider), except where Haulora determines purposes for its own account administration, security, and product analytics as an independent controller as described in the Privacy Policy.
2. Processing instructions
Haulora will process Customer Personal Data only to provide the Services, follow documented customer instructions, and comply with law. Customers are responsible for the lawfulness of instructions and for providing required notices to individuals.
3. Security and subprocessors
Haulora maintains appropriate technical and organizational measures and uses vetted subprocessors under written contracts. A current subprocessor list is available on request from privacy@haulora.co or legal@haulora.co.
4. Assistance, incidents, deletion
- We will assist with data-subject requests routed through the customer where required.
- We will notify the customer without undue delay after becoming aware of a personal-data breach affecting Customer Personal Data.
- Upon termination, we will delete or return Customer Personal Data according to product capabilities and legal retention needs.
5. Request a signed DPA
Enterprise customers may request a signed DPA (including SCCs where applicable) by emailing legal@haulora.co.