Data Processing Agreement

This Data Processing Agreement ("DPA") supplements our Terms of Service and describes how MPListing processes personal data in connection with the service.

Roles

For data submitted by customers to manage their business listing (e.g. lead/enquiry details from customers contacting them through MPListing), the business is the data controller and MPListing acts as a data processor. For account and platform data, MPListing is the data controller.

Scope of Processing

MPListing processes personal data only as necessary to provide the service: displaying business listings, delivering leads/enquiries to businesses, processing payments, and operating search and claim/verification workflows.

Subprocessors

We use a limited number of subprocessors to operate the service, currently including our payment processor (Stripe) for billing. We do not sell personal data to third parties.

Security Measures

We apply reasonable technical and organizational measures to protect personal data, including access controls, hashed passwords, and restricted admin access.

Data Subject Requests

Requests to access, correct, or delete personal data should be directed to us; we will assist business customers in responding to their own end-customers' requests where MPListing is the processor.

Breach Notification

We will notify affected business customers without undue delay if we become aware of a security incident affecting their data.