Addenda sur le traitement des données

Version 2026.12 — effective October 29, 2026. This Data Processing Addendum ("Addendum") forms part of the BooksAuto Terms of Service between Books Auto Solutions Ltd., 201-45863 Yale Road, Chilliwack, BC V2P 2N6 ("BooksAuto", "we") and the Customer ("you"). It applies to the Customer Data we process for you. Words defined in the Terms have the same meaning here.

1. Roles

You are the organization in control of Customer Data (in Québec, the person carrying on an enterprise who entrusts the information to us). We are your service provider and process Customer Data only on your behalf.

2. Your instructions

We process Customer Data only to provide, secure, support and bill for the Service, as you instruct through your use of the Service and your settings, and as the law requires. If the law requires us to process Customer Data otherwise, we will tell you first unless the law forbids it. You are responsible for your instructions complying with the law.

3. Confidentiality of our people

Only our staff and contractors who need it to provide the Service have access to Customer Data. They are bound by confidentiality obligations.

4. Security

We maintain the administrative, technical and physical safeguards described in the Terms and the Privacy Policy, appropriate to the sensitivity of Customer Data, and review them regularly.

5. Service providers

You authorize us to use the service providers named in the Privacy Policy (hosting, payments, email delivery and AI reading and categorization) and others that perform similar functions. We bind each by written terms that protect Customer Data at least as well as this Addendum, and we remain responsible for their work under the Terms. We will give at least 30 days' notice by email or in the app before adding a service provider that will process Customer Data; if you object on reasonable privacy grounds, your remedy is to cancel before the change and receive a refund of the unused part of any period paid in advance.

6. Help with individuals' requests

We give you the means in the Service to access, correct, export and delete Customer Data. If an individual sends us a request about Customer Data, we will pass it to you and will not answer it ourselves unless the law requires it. Further help is provided at our then-current rates where it requires significant work.

7. Breaches

We will notify you without unreasonable delay after confirming a breach of security safeguards involving Customer Data in our systems, and give you the information you reasonably need to assess it, to keep the required records and to notify regulators and individuals (what happened, when, the information involved, the steps taken and a contact). We will take reasonable steps to contain it and reduce its effects.

8. Outside your province and outside Canada

Customer Data may be processed outside your province and outside Canada as the Privacy Policy describes. We will give you the information we have that you reasonably need to complete any assessment the law requires of you before information is communicated outside Québec or your province.

9. Return and deletion

You can export Customer Data at any time while the account is active and for 90 days after it closes. After that we delete it from our active systems; copies in backups are overwritten in the normal backup cycle and are kept protected until then. We may keep Customer Data where the law requires it, protected by this Addendum.

10. Information and audits

On written request, and not more than once a year (or after a breach), we will answer reasonable questions about our safeguards and give you the information reasonably needed to show that we meet this Addendum. On-site audits are not offered, except where the law requires them, at your cost and with reasonable notice.

11. Liability and order

The limitations and exclusions of liability in the Terms apply to this Addendum. For Customer Data, this Addendum prevails over the Terms if they conflict. This Addendum lasts for as long as we process Customer Data for you.

12. Contact

Privacy Officer, Books Auto Solutions Ltd., 201-45863 Yale Road, Chilliwack, BC V2P 2N6 · support@booksauto.online