Data Processing Addendum (DPA)

Data Processing Addendum (DPA)

Effective Date: July 30, 2026

This Data Processing Addendum (“DPA”) forms part of any agreement between Florida Sign Company (“Florida Sign,” “Company,” “we,” “our,” or “Processor”) and any customer, client, or business partner (“Customer” or “Controller”) for products or services involving the processing of Personal Data.

This DPA supplements the parties’ applicable service agreement and describes the obligations regarding the processing of Personal Data in accordance with applicable privacy and data protection laws.

1. Definitions

For purposes of this DPA:

Applicable Data Protection Laws means all privacy and data protection laws applicable to the processing of Personal Data, including, where applicable:

  • U.S. federal privacy laws
  • Applicable state privacy laws
  • The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)
  • The Virginia Consumer Data Protection Act (VCDPA)
  • The Colorado Privacy Act (CPA)
  • The Connecticut Data Privacy Act (CTDPA)
  • The Utah Consumer Privacy Act (UCPA)
  • The European Union General Data Protection Regulation (GDPR), where applicable
  • The United Kingdom GDPR, where applicable

Controller means the entity that determines the purposes and means of processing Personal Data.

Processor means the entity that processes Personal Data on behalf of the Controller.

Personal Data means information relating to an identified or identifiable individual as defined by applicable law.

Processing means any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, deletion, or destruction.

2. Scope

This DPA applies whenever Florida Sign Company processes Personal Data on behalf of a Customer in connection with providing products or services.

Where Florida Sign Company acts as the Controller of Personal Data collected through its own website or business operations, the Privacy Policy governs such processing.

3. Nature and Purpose of Processing

Florida Sign Company may process Personal Data for purposes including:

  • Responding to inquiries
  • Preparing proposals and estimates
  • Managing customer accounts
  • Producing signage and related products
  • Coordinating fabrication and installation
  • Scheduling projects
  • Customer communications
  • Project management
  • Billing and invoicing
  • Customer support
  • Website administration
  • Security monitoring
  • Legal compliance

4. Categories of Personal Data

Depending upon the services provided, Personal Data may include:

  • Name
  • Business name
  • Job title
  • Email address
  • Telephone number
  • Mailing address
  • Project location
  • Billing information
  • Communication records
  • Website usage information
  • IP address
  • Device information
  • Other information voluntarily provided by the Customer

Florida Sign Company does not intentionally request or require sensitive personal information unless necessary for a specific business purpose.

5. Categories of Data Subjects

Personal Data may relate to:

  • Customers
  • Prospective customers
  • Business representatives
  • Employees of customers
  • Vendors
  • Contractors
  • Website visitors
  • Authorized representatives

6. Processor Obligations

Florida Sign Company agrees to:

  • Process Personal Data only on documented instructions from the Controller, unless otherwise required by law;
  • Process Personal Data only for the purposes described in the applicable agreement;
  • Maintain appropriate confidentiality obligations for personnel with access to Personal Data;
  • Implement reasonable technical and organizational safeguards to protect Personal Data;
  • Notify the Controller of legally required disclosures unless prohibited by law;
  • Assist the Controller, where reasonably appropriate, in responding to data subject requests.

7. Security Measures

Florida Sign Company maintains reasonable administrative, technical, and physical safeguards designed to protect Personal Data, including measures such as:

  • Role-based access controls
  • Password protection
  • Multi-factor authentication where appropriate
  • Secure hosting environments
  • Network security measures
  • Firewall protection
  • Encryption of data in transit where supported
  • Secure backup procedures
  • Employee awareness regarding confidentiality
  • Vendor security evaluations, where appropriate

While no security program is completely immune from risk, Florida Sign Company continually works to protect the information entrusted to it.

8. Subprocessors

Florida Sign Company may engage trusted third-party service providers (“Subprocessors”) to assist with business operations, including:

  • Website hosting providers
  • Cloud service providers
  • Email service providers
  • Customer relationship management (CRM) systems
  • Accounting software
  • Payment processors
  • Analytics providers
  • IT support providers
  • Backup providers

Florida Sign Company requires Subprocessors to maintain reasonable safeguards appropriate to the services they provide.

9. International Data Transfers

Where Personal Data is transferred outside the jurisdiction in which it was collected, Florida Sign Company will take reasonable steps to ensure such transfers comply with applicable data protection laws.

Where required by law, appropriate safeguards may include contractual commitments or other legally recognized transfer mechanisms.

10. Confidentiality

Florida Sign Company shall ensure that employees, contractors, and authorized personnel with access to Personal Data are subject to confidentiality obligations appropriate to their responsibilities.

11. Data Subject Requests

Where Florida Sign Company processes Personal Data on behalf of a Controller and receives a request from a data subject regarding that information, Florida Sign Company will, where appropriate:

  • Notify the Controller;
  • Cooperate with the Controller in responding to the request; and
  • Process such requests only in accordance with the Controller’s documented instructions, unless otherwise required by law.

12. Personal Data Breach

If Florida Sign Company becomes aware of a confirmed Personal Data breach affecting Personal Data processed on behalf of a Customer, we will notify the Customer without undue delay after becoming aware of the breach, as required by applicable law.

Such notification may include, where reasonably available:

  • A description of the incident;
  • The categories of Personal Data involved;
  • The known or anticipated impact;
  • The measures taken to address the incident; and
  • Contact information for follow-up.

13. Data Retention and Deletion

Florida Sign Company retains Personal Data only for as long as reasonably necessary to:

  • Fulfill contractual obligations;
  • Provide requested services;
  • Comply with legal requirements;
  • Resolve disputes;
  • Maintain business records; and
  • Enforce agreements.

Upon completion of services and subject to applicable legal obligations, Personal Data may be securely deleted or anonymized.

14. Audits

Where required by applicable law or contract, Florida Sign Company may provide reasonable information demonstrating compliance with this DPA, provided that:

  • Appropriate confidentiality protections are maintained;
  • Requests are reasonable in scope and frequency; and
  • Any audit does not interfere unreasonably with business operations.

15. Limitation of Liability

To the extent permitted by applicable law and the governing agreement between the parties, each party’s liability under this DPA shall be subject to the limitations of liability contained in the applicable services agreement or Terms of Use.

16. Changes to This DPA

Florida Sign Company reserves the right to update this DPA to reflect:

  • Changes in applicable law;
  • Business operations;
  • Technology;
  • Security practices; or
  • Regulatory guidance.

Updated versions will be posted with a revised Effective Date.

17. Contact Information

Questions regarding this Data Processing Addendum or our privacy practices may be directed to:

Florida Sign Company

Website: https://www.floridasign.com/

Email: customerservice@floridasign.com

Phone: (941) 747-1000

18. Order of Precedence

If there is a conflict between this Data Processing Addendum and the applicable written services agreement between Florida Sign Company and the Customer regarding the processing of Personal Data, the provisions of this DPA shall control solely with respect to data protection obligations, unless otherwise required by applicable law.