bloomsocial site logo

Data Processing Addendum

Data Processing Addendum

This Data Processing Addendum forms part of the agreement between BloomSocial Inc. and the Customer.

1. Roles

  • Customer is the Data Controller
  • BloomSocial is the Data Processor

2. Scope of Processing

BloomSocial processes personal data solely to provide and support the BloomSocial services, in accordance with documented customer instructions.

3. Confidentiality

BloomSocial ensures that personnel authorized to process personal data are bound by confidentiality obligations.

4. Security Measures

BloomSocial implements appropriate technical and organizational measures aligned with industry standards, including SOC 2 controls, to protect personal data.

5. Subprocessors

BloomSocial may engage subprocessors to support service delivery. BloomSocial remains responsible for subprocessors compliance with this DPA.

6. Data Subject Rights Assistance

BloomSocial will assist customers in responding to data subject requests, where applicable.

7. Incident Notification

BloomSocial will notify customers of a confirmed personal data breach without undue delay.

8. Data Return or Deletion

Upon termination of services, BloomSocial will delete or return customer data as instructed, unless retention is required by law.

9. Audit Rights

Upon reasonable notice, BloomSocial will provide relevant documentation or third party audit reports to demonstrate compliance.