Subject matter
Providing the Servmora business-management service and the features selected by the subscribing business.
DATA PROCESSING AGREEMENT
Clear responsibilities for customer information processed through Servmora.
This Data Processing Agreement forms part of the Servmora Terms of Service where Servmora processes personal data on behalf of a subscribing business.
Version: 24 August 2026
Business as controllerThe subscribing business normally decides why its customer information is used.
Servmora as processorChris Hayes trading as Servmora processes that information to provide the service.
Documented purposeProcessing is limited to providing, protecting and supporting Servmora.
Return and exportMain structured records can be exported by the Account Owner.
1 · SCOPE & ROLES
When this agreement applies.
This agreement applies where a Servmora customer determines the purposes and means of processing personal data placed in its Servmora account and Chris Hayes trading as Servmora processes that data on the customer's behalf.
For that Customer Data, the subscribing business is normally the controller and Servmora is the processor. Each party will comply with the data-protection obligations that apply to its role, including the UK GDPR and Data Protection Act 2018 where applicable.
For Servmora's own account administration, security, billing, support and legal records, Chris Hayes trading as Servmora may act as controller as explained in the Privacy & Data Protection Policy.
2 · DOCUMENTED INSTRUCTIONS
Customer Data is processed to provide the service the business has chosen.
Servmora will process Customer Data only on documented instructions from the business, unless processing is required by applicable law. The Terms, the selected plan, account settings and actions taken by authorised users together form the business's documented instructions.
Typical processing includes storing customer and job records, displaying information to authorised users, creating bookings and documents, sending requested communications through enabled providers, creating recovery copies, providing exports and operating features selected by the business.
If Servmora believes an instruction would breach applicable data-protection law, the business will be informed where legally permitted.
3 · CONFIDENTIALITY & SECURITY
Appropriate safeguards are maintained for Customer Data.
People authorised to handle Customer Data on behalf of Servmora are required to keep it confidential. Servmora maintains technical and organisational measures appropriate to the service, including protected account access, encrypted web connections, role-based permissions, sign-in protection, service monitoring and regular recovery copies.
Servmora will review these safeguards as the service develops and may update them where this improves security or reflects changes in technology, risk or law.
4 · SUBPROCESSORS & CONNECTED PROVIDERS
Specialist providers may be used where needed to deliver a feature.
The business gives general authorisation for Servmora to use subprocessors reasonably required to operate, host, secure or support the service and to provide features the business enables. This can include infrastructure hosting and specialist providers for email, text messages, payments, maps or other connected functions.
Servmora remains responsible for ensuring that a subprocessor handling Customer Data on Servmora's behalf is subject to appropriate data-protection and confidentiality obligations. Where reasonably practical, material additions or replacements that affect Customer Data will be communicated so the business can raise a reasonable data-protection objection.
Some connected services are chosen or separately contracted by the business. Their own terms and privacy arrangements may also apply.
5 · INTERNATIONAL TRANSFERS
Appropriate safeguards apply where personal data is transferred internationally.
If Customer Data is transferred outside the United Kingdom in connection with an enabled provider or subprocessor, Servmora will use a lawful transfer mechanism where required, such as an adequacy regulation or appropriate contractual safeguards.
The business remains responsible for any international transfer it makes independently of Servmora or through a provider it connects directly.
6 · ASSISTANCE TO THE BUSINESS
Servmora will provide reasonable assistance with data-protection obligations.
Taking account of the nature of the processing and information available to Servmora, reasonable assistance will be provided where the business needs to respond to a valid request from an individual exercising data-protection rights.
Servmora will also provide reasonable assistance, where relevant to the service, with security obligations, personal-data breach assessment and notification, data-protection impact assessments and consultations with a supervisory authority.
If Servmora becomes aware of a personal-data breach affecting Customer Data, the affected business will be informed without undue delay after Servmora has sufficient information to identify the relevant account, subject to legal restrictions.
7 · INFORMATION & AUDIT
Information needed to demonstrate compliance can be provided reasonably.
Servmora will make available information reasonably necessary to demonstrate compliance with the processor obligations covered by this agreement.
Where a business reasonably requires an audit because of a genuine compliance concern and equivalent information is not sufficient, the parties will agree a proportionate method that protects the security, confidentiality and information of other Servmora customers. Audits must not unreasonably disrupt the service.
8 · RETURN, EXPORT & DELETION
The business can take its main structured records when service ends.
The Account Owner can export the main structured business records. Uploaded photographs and videos may require separate download.
After the service ends, Customer Data may be deleted or retained only where reasonably needed to complete the agreed retention process, maintain protected recovery copies for their normal retention period, resolve disputes, prevent fraud or meet a legal obligation.
Where the business requests deletion and no legal retention requirement applies, Servmora will remove the relevant live Customer Data within a reasonable period. Data already contained in protected recovery copies will expire through the normal backup-retention cycle.
9 · PROCESSING DETAILS
Schedule of processing carried out for a Servmora business.
Duration
For the period the business uses Servmora, plus limited retention needed for recovery, legal, security or account-closure purposes.
Nature and purpose
Collection, storage, organisation, retrieval, display, updating, communication, backup, export and deletion necessary to provide and protect the service.
Types of personal data
Names, contact details, addresses, booking information, service history, notes, photographs, signatures, vehicle/property/pet/client information, communications and related operational records supplied through the account.
People whose data may be processed
The business's customers, prospective customers, authorised users, staff, contractors and other people whose information the business lawfully places in Servmora.
Business obligations
Provide lawful instructions, use appropriate access permissions, give required privacy information and ensure it has a lawful basis for the Customer Data it places in Servmora.
This DPA forms part of the Servmora agreement.
Questions about data processing can be sent to support@servmora.co.uk. UK service address available upon request.