Services and Standards
The Provider must deliver the agreed services with reasonable skill, uptime, security, support, documentation, and compliance with applicable law. Service levels, fees, data categories, subprocessors, and termination rights should be attached in an order form.
Data Protection and Confidentiality
Where the Provider processes personal data for FreshDrop, it must comply with written data processing terms, process data only on instructions, protect confidentiality, implement security measures, assist with rights requests, and notify FreshDrop of incidents promptly.
Audit, Security, and Incident Response
The Provider should maintain security controls appropriate to the data handled and provide reasonable evidence of compliance on request. Security incidents, downtime, data loss, or unauthorized disclosures must be reported without undue delay.
IP and Transition
FreshDrop retains ownership of its data, brand, configurations, custom work product, and business information. The Provider must support orderly transition, export, deletion, or migration when the agreement ends.