Real estate growth tools by Loyal Techno Group
Customer processing agreement

Data Processing Addendum

Terms for processing personal information on a customer’s instructions under an agreed service contract.

✓
Private design review · No effective date or publication approval is implied.
What this page covers
01
Parties
Customer and Loyal roles
02
Scope
Instructions, information and purposes
03
Assistance
Applicable rights and obligations
04
Lifecycle
Return, deletion and transfers
Parties & roles

1. Parties and processing roles

This Data Processing Addendum forms part of the service agreement between Loyal Techno Group LLC (“LTG”) and the customer identified in that agreement (“Customer”) when incorporated and accepted through that agreement. Viewing this page alone does not create an agreement.

It applies to personal information LTG processes on Customer’s behalf to provide the agreed services (“Customer Data”). Customer is the controller or, where applicable, a processor authorized to engage LTG. LTG acts as the processor or service provider for that processing. LTG’s independent website, billing, and customer-management processing is covered separately by its Privacy Policy.

Processing scope

2. Instructions and processing scope

LTG processes Customer Data only on documented instructions to provide the agreed services, including instructions concerning disclosures and transfers, unless applicable law requires otherwise. Where permitted, LTG informs Customer of that legal requirement before processing and informs Customer if an instruction appears to violate applicable data-protection law.

Processing may include storing and organizing records, website and listing functions, chat and AI assistance, authorized communications, CRM synchronization, support, and data return or deletion. Relevant data may include contact and account details, messages, website interactions, property preferences, and customer-provided records relating to visitors, contacts, users, and Customer’s personnel.

The agreed processing schedule specifies the services, data and individual categories, purposes, operations, duration, and Customer’s rights and obligations. Customer is responsible for lawful instructions and required notices and permissions. LTG does not use Customer Data for its own promotional campaigns or permit providers to use it to train general AI models.

applicable-obligations

3. Confidentiality, providers and assistance

LTG binds authorized personnel to confidentiality and maintains security measures appropriate to the processing and risk, as described in the agreed security schedule.

LTG engages subprocessors under Customer’s written specific or general authorization. The applicable private schedule identifies them. Under general authorization, LTG provides advance written information about additions or replacements and a meaningful opportunity to object on data-protection grounds before engagement. The agreement defines notice and resolution procedures. LTG places applicable data-protection obligations on subprocessors and remains responsible as required by law and agreement.

Considering the nature of processing and information available, LTG assists Customer with individual-rights requests, security obligations, impact assessments, and regulatory consultation as required by applicable law. LTG forwards relevant requests to Customer and responds directly only when authorized or legally required.

LTG notifies Customer without undue delay after becoming aware of a personal-data breach affecting Customer Data. It provides available details about the breach, affected information, likely consequences, contact route, and response measures, with updates as information becomes available.

LTG provides information needed to demonstrate compliance and permits and contributes to audits where required by applicable law. Reasonable arrangements protect confidentiality, security, and other customers’ information without limiting mandatory rights.

Data lifecycle

4. Data lifecycle

Request any final commercial export before cancellation takes effect. LTG may delete controlled data after cancellation, subject to Customer’s lawful return or deletion instructions, applicable law, and pending timely export requests. Data needed for a timely export is preserved until delivery and the end of a 14-calendar-day download period after ready notification. Backup copies expire through normal rotation under the agreed retention schedule.
Commercial export limits do not restrict mandatory data-protection rights. Licensed MLS information remains subject to provider requirements.
Return & transfers

5. Return and transfer of information

At the end of processing, at Customer’s choice, LTG returns or deletes Customer Data and deletes existing copies as required by applicable law, unless retention is legally required. The agreed schedule addresses delivery, active systems, backup expiry, provider-held records, and any retained exceptions. Retained data remains protected and is not used for unrelated purposes.

 

International processing and access follow Customer’s documented instructions and the agreed schedules. Where a transfer requires a legal mechanism, the parties implement the applicable safeguards before that transfer. The relevant documents identify the recipients, locations, and safeguards.

Commercial fees, export allowances, or account standing do not limit return, deletion, or assistance required by applicable law. Restoring a backup must not undo completed deletions.

Agreement documents

6. Annexes and agreement precedence

The agreed processing, security, retention, and subprocessor schedules and any required transfer documents form part of this addendum. They may be supplied privately to Customer.

For conflicts concerning Customer Data, this addendum takes precedence over general service terms. Mandatory transfer clauses take precedence where they require it. The service agreement identifies the accepted version and acceptance process.