This Data Processing Agreement ("DPA") applies where TrainingWheels processes personal data on behalf of a customer. It forms part of our Terms of Service and should be read with our Privacy Policy.
Roles
For the personal data covered by this DPA, you are the controller and TrainingWheels is the processor. We process that data only on your instructions, which are given by your use of the service and by this DPA.
Data we process
- Email addresses of account users.
- Licence keys, plan entitlement and device activations.
- Billing identifiers linked to the account.
- Optional journal and performance entries, if you choose to sync them in a later version.
Purpose
We process this data only to provide the service: running accounts, licensing, billing, support and abuse prevention.
Sub-processors
We use the following categories of sub-processor:
- Our payment processor, for payments and billing.
- Our authentication provider, for sign-in.
- Our hosting and database providers, for the website, account and licence service.
- Our email provider, for account and support email.
To request the current list of named sub-processors, contact support@canfieldcandles.com.
Security
Passwords are handled by our authentication provider and card details by our payment processor, so neither is stored on our own systems. Details of the security measures that apply to your data are available on request.
Data subject rights
Individuals may request access to, correction of, or deletion of their personal data by contacting support@canfieldcandles.com. We will help you respond to these requests.
Personal data breaches
If we become aware of a personal data breach affecting your data, we will notify you without undue delay.
Retention and deletion
We keep personal data for the periods set out in our Privacy Policy. On deletion, licences are revoked and personal details are removed, except order records that must be kept for tax purposes.
Contact
Questions about this DPA: support@canfieldcandles.com.