Data Processing Agreement

Overview

QuoteMyTrade acts as a Data Processorwhen processing your customers' personal data on your behalf. As the tradesperson using our service, you are the Data Controller.

Your responsibilities

As the Data Controller, you (the tradesperson) are responsible for ensuring you have a lawful basis to share your customers' data with QuoteMyTrade. This typically means:

• You have your customer's consent to use their data for quote generation
• Or you have a legitimate interest in processing their data to fulfil a potential contract

Our responsibilities

• We process your customers' data solely to generate quote documents as instructed by you
• We do not use your customers' data for any other purpose
• We implement appropriate technical and organisational security measures
• We will notify you of any data breaches affecting your customers' data within 72 hours
• We will delete your customers' data upon deletion of your account

Sub-processors

We use the following sub-processors to provide our service:

• Supabase — data storage (EU)
• Anthropic — AI processing for quote generation
• Vercel — hosting

Legal basis

This DPA is entered into pursuant to Article 28 of UK GDPR and constitutes the data processing agreement between you and QuoteMyTrade.

Contact

For data processing enquiries: contact@quotemytrade.co.uk