Plans & Pricing How It Works FAQ Terms of Service Privacy Policy SMS Consent DPA (760) 550-9496

Legal

Data Processing Agreement

Last updated: March 23, 2026

This Data Processing Agreement ("DPA") is incorporated into and forms part of the Terms of Service ("Agreement") between the Customer ("you," "your") and the operator of Ready Reputation, available at readyreputation.com ("the Platform"). Ready Reputation is a service of Brooklyn Beach Design LLC ("we," "our," "us"). This DPA governs the processing of personal data that Brooklyn Beach Design LLC performs on behalf of the Customer in connection with the Platform, in compliance with applicable data protection laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using the Platform, the Customer agrees to the terms of this DPA.

1. Definitions

  • Data Controller: The entity that determines the purposes and means of the processing of personal data. The Customer acts as Data Controller.
  • Data Processor: The entity that processes personal data on behalf of the Data Controller. Brooklyn Beach Design LLC acts as Data Processor.
  • Data Subject: Any identified or identifiable individual whose personal data is processed.
  • Personal Data: Any information relating to an identified or identifiable individual.
  • Processing: Any operation or set of operations performed on personal data, such as collection, storage, use, disclosure, or erasure.
  • Sub-Processor: Any third party appointed by Brooklyn Beach Design LLC to process personal data on behalf of the Customer.

2. Roles and Responsibilities

Customer as Data Controller: The Customer acts as the Data Controller for all personal data processed through the Platform. As Data Controller, the Customer is responsible for determining the legal basis for processing and ensuring compliance with applicable data protection laws.

Brooklyn Beach Design LLC as Data Processor: Brooklyn Beach Design LLC acts as the Data Processor and processes personal data on behalf of the Customer solely in accordance with this DPA and the Customer's documented instructions.

3. Types of Personal Data Processed

Brooklyn Beach Design LLC processes the following categories of personal data on behalf of the Customer:

  • End-user data: Names, email addresses, reviews, feedback, and other information submitted through review requests or landing pages.
  • Customer data: Names, email addresses, contact information, login credentials, and other business-related data.
  • Usage data: IP addresses, device information, and data related to the usage of the Platform.
  • Campaign contact data: Names, email addresses, and phone numbers of the Customer's customers uploaded for review request campaigns via email, SMS, or WhatsApp.

The scope of data processed may change based on the services provided, and the Customer will be informed accordingly.

4. Purpose of Processing

Brooklyn Beach Design LLC processes personal data for the following purposes on behalf of the Customer:

  • Aggregating reviews from third-party platforms including Google, Yelp, Facebook, TripAdvisor, and others connected by the Customer.
  • Generating and posting AI-powered responses for supported review channels on the Customer's behalf.
  • Drafting AI-suggested replies for Yelp and other platforms for the Customer to post manually.
  • Sending review request campaigns via email, SMS, and WhatsApp to the Customer's contacts.
  • Preparing social proof content from genuine public reviews where included in the Customer's service package.
  • Displaying reviews via embeddable website widgets where included in the Customer's service package.
  • Performing analytics and review & keyword insights to support the Customer's reputation management.
  • Automating review request follow-up reminders.

5. Duration of Processing

The processing of personal data will continue for the duration of the Agreement. Upon termination or expiration of the Agreement, Brooklyn Beach Design LLC will retain data for up to 90 days before deletion, unless otherwise required by law or requested earlier by the Customer.

6. Processor Obligations

Brooklyn Beach Design LLC agrees to:

  • Process data only under Customer instructions: Personal data will be processed only as necessary to provide the Platform and in accordance with the Customer's documented instructions.
  • Ensure confidentiality: All employees or contractors involved in processing personal data are subject to a binding duty of confidentiality.
  • Implement security measures: Appropriate technical and organizational measures are maintained to protect personal data from unauthorized access, loss, alteration, or disclosure. See Section 10 for details.
  • Assist the Customer: Brooklyn Beach Design LLC will provide reasonable assistance to the Customer in fulfilling its obligations to respond to data subject requests and in ensuring compliance with applicable laws.
  • Data breach notification: In the event of a personal data breach, Brooklyn Beach Design LLC will notify the Customer without undue delay after becoming aware of the breach and provide reasonable information and assistance to support the Customer's response obligations.

7. Customer Obligations

As Data Controller, the Customer agrees to:

  • Provide lawful instructions: Ensure that all instructions provided to Brooklyn Beach Design LLC are lawful and comply with applicable data protection laws.
  • Inform data subjects: Provide data subjects with any required privacy notices and obtain required consents where applicable, including consent for SMS and WhatsApp communications.
  • Ensure legal basis for processing: Maintain a valid legal basis for processing personal data uploaded to or collected through the Platform.
  • Respond to data subject requests: Handle all data subject requests related to personal data processed through the Platform. Brooklyn Beach Design LLC will provide reasonable assistance upon request.

8. Sub-Processors

Brooklyn Beach Design LLC may engage Sub-Processors to process personal data on behalf of the Customer. Current Sub-Processors include but are not limited to:

  • Stripe: Payment processing
  • Twilio: SMS and WhatsApp campaign delivery
  • Google: Review aggregation, AI services, and analytics
  • Meta (Facebook/Instagram): Social sharing and review aggregation
  • Cloud hosting providers: Platform infrastructure and data storage

Brooklyn Beach Design LLC will ensure that any Sub-Processor engaged provides the same level of data protection required by this DPA. The Customer will be notified of any material changes to Sub-Processors and will have the opportunity to object. Brooklyn Beach Design LLC remains fully liable for the performance of its Sub-Processors. A complete and current list of Sub-Processors is available upon request.

9. International Data Transfers

Brooklyn Beach Design LLC is based in California, United States. Personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or other regions with data protection laws that differ from those in the Customer's jurisdiction. Where such transfers occur, Brooklyn Beach Design LLC will ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms as required by applicable law.

10. Security Measures

Brooklyn Beach Design LLC implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data during transmission (TLS/HTTPS).
  • Access controls and authentication to prevent unauthorized access to data.
  • Payment data processed exclusively through Stripe — no full card numbers are stored on our servers.
  • Regular security assessments and monitoring.
  • Incident response procedures to handle data breaches promptly.

11. Data Subject Rights

Brooklyn Beach Design LLC will assist the Customer in ensuring compliance with data subjects' rights under applicable data protection laws, including:

  • Right of access to personal data
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure ("right to be forgotten")
  • Right to restrict or object to processing
  • Right to data portability (where applicable)

Requests from data subjects received by Brooklyn Beach Design LLC will be forwarded to the Customer for handling. Brooklyn Beach Design LLC will provide reasonable assistance as necessary to support the Customer's response.

12. Data Retention and Deletion

Upon termination or expiration of the Agreement, Brooklyn Beach Design LLC will, at the Customer's written request:

  • Return all personal data processed on behalf of the Customer in a portable format, or
  • Securely delete all personal data, unless retention is required by applicable law.

In the absence of a specific request, data will be deleted within 90 days of account termination.

13. Audit Rights

The Customer has the right to request audits or inspections of Brooklyn Beach Design LLC's processing activities to verify compliance with this DPA. Such audits will be conducted at the Customer's cost, with reasonable advance notice (minimum 30 days), and with minimal disruption to Brooklyn Beach Design LLC's operations. Brooklyn Beach Design LLC may satisfy audit requests by providing up-to-date third-party security certifications or audit reports where available.

14. Liability

Both parties agree that their liability under this DPA is subject to the limitations and exclusions set out in the Terms of Service, except where such limitations are prohibited by applicable data protection laws.

15. Governing Law

This DPA shall be governed by and construed in accordance with the laws of the State of California, United States, without regard to its conflict of laws principles. For Customers subject to GDPR, this DPA shall additionally be interpreted in accordance with applicable EU data protection law.

16. Termination

This DPA shall remain in effect for as long as Brooklyn Beach Design LLC processes personal data on behalf of the Customer. Upon termination of the Agreement, the data handling obligations set out in this DPA will continue to apply until all personal data has been returned or deleted in accordance with Section 12.

17. Contact Information

For questions, requests, or concerns regarding this DPA or your data privacy rights, contact us at: