Data Processing Agreement

This Data Processing Agreement (“DPA”) forms part of our Terms of Service and sets out how we process personal data on your behalf when providing transport coordination services.

1. Roles and Scope

Obsidian GT acts as a data processor when you submit personal data (e.g., name, contact info, address) through our quote form or related communication.

You remain the data controller for any information you provide, and we will only use this data to fulfill the service you’ve requested.

2. Data Use and Retention

We store submitted data securely and limit access to those coordinating transport. Data is retained only as long as necessary to fulfill our legal and operational obligations — typically no more than 12 months unless required for regulatory or insurance purposes.

3. Subprocessors

Where necessary, we may share limited contact details with trusted subcontractors to complete your job. All subcontractors are under confidentiality obligations and are not permitted to retain or reuse your data.

4. Rights and Requests

You can request deletion, correction, or access to your personal data at any time by emailing privacy@obsidiangt.com. We respond to all data-related requests within 30 days.

Last updated: July 2025