BookMarvels

Data Processing Addendum

Last updated: October 3, 2026

This Data Processing Addendum ("DPA") forms part of the Terms of Service between Ringenious Solutions LLC ("Ringenious", the processor) and the Business using BookMarvels (the "Business", the controller). If this DPA conflicts with the Terms on data protection, this DPA wins.

Scope

This DPA covers personal information about the Business's clients and team that Ringenious processes to provide BookMarvels: names, contact details, booking and service history, notes, payment records (not full card numbers), message history and consent records. Processing lasts while the Business uses the Service and until the data is deleted under this DPA.

Account and billing data about Business users, and data about website visitors, are handled by Ringenious as a controller under the Privacy Policy, not under this DPA.

Processing instructions

Ringenious processes client data only on the Business's documented instructions, which are the Terms, this DPA and the Business's use and settings of the Service. Ringenious will not sell client data, use it for its own marketing, or combine it with other data except as needed to provide the Service (for example, the shared email suppression list that protects deliverability). Ringenious will tell the Business if it believes an instruction breaks the law.

Confidentiality

Everyone at Ringenious with access to client data is bound by confidentiality and has access only as needed for their work. Support access to a Business's account is recorded in the audit log.

Subprocessors

The Business authorizes the subprocessors listed in the Privacy Policy. Ringenious binds each to data protection terms at least as protective as this DPA and remains responsible for them. Ringenious will update the list and notify Business account owners before adding or replacing a subprocessor; the Business may object on reasonable data protection grounds and, if we cannot resolve it, close its account.

Security measures

  • TLS encryption for data in transit.
  • Credentials for payment and texting providers encrypted at rest.
  • Card data entered in Clover's hosted fields and tokenized by Clover; full card numbers are never stored.
  • Role-based access, with sensitive actions recorded in audit logs.
  • Password re-confirmation for actions that move money.
  • Regular backups.

Breach notification

Ringenious will notify the Business without undue delay, aiming for within 72 hours, after becoming aware of a breach affecting the Business's data. The notice will describe what happened, the data involved, and the steps taken, and Ringenious will provide reasonable help with any notices the Business must give.

Data subject requests

If a client asks Ringenious directly to access, correct or delete their information, Ringenious will pass the request to the Business. The Business can handle most requests itself in the dashboard (editing or removing clients, exporting data). Ringenious will provide reasonable help with requests the Business cannot handle itself.

Deletion and return

The Business can export its data at any time, including a complete ZIP using "Export everything". After the account closes, Ringenious deletes or anonymizes client data within 90 days, except records it must keep by law, and consent records needed to prove consent. Backups roll off on their own schedule and remain protected until they do.

Audits

On reasonable written request, no more than once a year, Ringenious will provide information needed to show compliance with this DPA, such as answers to a security questionnaire. Any further audit must be agreed in advance, at the Business's cost, and subject to confidentiality.

International transfers

BookMarvels is US-based and data is stored and processed in the United States. If the Business has clients in the EU or UK, the Business is responsible for informing them that their data is transferred to the US; the parties will cooperate to put in place an appropriate transfer mechanism (such as Standard Contractual Clauses) where required.

Contact

Ringenious Solutions LLC, 8 The Green, Dover, DE 19901, USA. Email: support@bookmarvels.com.