Effective Date: July 23, 2026
This Data Processing Addendum ("DPA") forms part of and is incorporated into the Work-A-Beez Terms of Service (the "Agreement") between Linton Business Solutions, LLC, doing business as Work-A-Beez ("LBS," "Work-A-Beez," "Processor," "Service Provider," "we," "our," or "us") and the business entity subscribing to or using the Work-A-Beez platform ("Customer," "Controller," "Business," "you," or "your").
This DPA governs the processing of Personal Data by Linton Business Solutions, LLC on behalf of the Customer in connection with the Work-A-Beez workforce management platform.
If there is a conflict between this DPA and the Terms of Service with respect to Personal Data processing, this DPA shall control to the extent of that conflict.
The purpose of this DPA is to define each party's rights and responsibilities regarding the processing of Personal Data within the Work-A-Beez platform and to establish commercially reasonable safeguards for protecting Customer Data.
This DPA is intended to support compliance with applicable privacy and data protection laws, including, where applicable:
Nothing in this DPA is intended to expand or reduce any statutory rights or obligations beyond those required by applicable law.
This DPA applies whenever Linton Business Solutions, LLC processes Personal Data on behalf of a Customer while providing the Work-A-Beez Service. This includes data processed through:
This DPA does not apply to information processed by third-party services that operate under their own privacy policies, except to the extent LBS engages those providers as authorized subprocessors.
For purposes of this DPA:
Agreement. The Work-A-Beez Terms of Service together with all incorporated policies.
Customer. The legal business entity that subscribes to Work-A-Beez.
Customer Data. Any information uploaded, entered, stored, generated, or transmitted by the Customer through the Work-A-Beez platform. Customer Data includes, but is not limited to:
Customer Data remains the property of the Customer.
Personal Data. Information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable individual. Examples include:
Personal Data does not include information that has been anonymized so that it can no longer reasonably identify an individual.
Processing. Any operation performed on Personal Data, including:
Controller. The Customer. The Customer determines what information is collected, why it is collected, how it will be used, how long it will be retained, and who is authorized to access it.
Processor. Linton Business Solutions, LLC. LBS processes Personal Data only on behalf of and according to the documented instructions of the Customer, except where otherwise required by applicable law.
Data Subject. An identified or identifiable individual whose Personal Data is processed through the Service, including:
Subprocessor. A third-party service provider engaged by Linton Business Solutions, LLC to process Personal Data in support of the Work-A-Beez platform. Examples may include providers for:
Security Incident. A confirmed event resulting in unauthorized access to, acquisition of, disclosure of, alteration of, or destruction of Customer Personal Data processed by LBS. A Security Incident does not include unsuccessful attempts or activities that do not compromise Customer Data, such as routine internet scans, firewall blocks, denial-of-service attempts that do not result in unauthorized access, or failed login attempts.
Customer Responsibilities. The Customer acts as the Controller (or equivalent role under applicable law) with respect to Customer Data and Personal Data processed through Work-A-Beez. The Customer is solely responsible for:
Linton Business Solutions Responsibilities. Linton Business Solutions acts as a Processor or Service Provider for Customer Data. LBS shall:
LBS does not determine:
LBS processes Customer Personal Data solely for purposes that are necessary to provide the Work-A-Beez Service, including:
LBS shall not process Customer Personal Data for advertising unrelated products or services, nor sell Customer Personal Data to third parties.
Depending on Customer use of the Service, Personal Data processed may include:
Company Information
Administrator Information
Employee Information
Technical Information
LBS processes only the categories of Personal Data necessary to deliver the requested Services.
LBS will process Customer Personal Data for the duration of the Agreement unless:
Linton Business Solutions, LLC ("LBS") shall process Customer Personal Data only:
If LBS believes a Customer instruction violates applicable law, LBS may suspend the applicable processing activity until the matter is resolved or decline to process the instruction where legally required.
LBS recognizes that Customer Data is confidential business information. LBS shall:
Confidentiality obligations survive termination of the Agreement.
LBS shall implement reasonable internal safeguards, including:
Access to Customer information is granted only when necessary to support the Service.
LBS maintains commercially reasonable administrative, technical, and physical safeguards designed to protect Customer Personal Data. Security measures may include:
Access Controls
Network Security
Data Protection
Application Security
Operational Security
LBS reserves the right to improve or modify security controls provided such changes do not materially reduce the overall level of protection.
Work-A-Beez operates using a secure multi-tenant architecture. LBS implements logical separation mechanisms intended to ensure:
Customers acknowledge that multi-tenant cloud architecture differs from dedicated hosting while providing commercially reasonable isolation between customer environments.
Where commercially reasonable, LBS uses encryption technologies designed to protect Customer Personal Data. This includes:
Payment card information is processed directly by Stripe. LBS does not receive, store, or process full payment card numbers or CVV values.
Customers are responsible for managing user access within their organizations. Customers should:
LBS is not responsible for unauthorized access resulting from compromised Customer credentials that are outside the reasonable control of LBS.
Customers agree to implement reasonable administrative safeguards, including:
Customers remain responsible for securing their own networks, endpoints, and internal systems.
LBS maintains internal procedures for responding to suspected Security Incidents. These procedures include, where appropriate: identification, containment, investigation, remediation, recovery, documentation, and lessons learned.
LBS will take commercially reasonable measures to mitigate the effects of confirmed Security Incidents affecting Customer Personal Data.
If LBS becomes aware of a confirmed Security Incident involving Customer Personal Data under its control, LBS will notify the affected Customer without undue delay after confirming the incident. Notification may include, as appropriate:
Notification may be delayed where necessary to preserve forensic investigations, comply with law enforcement requests, meet legal obligations, or prevent further harm.
Notification of a Security Incident does not constitute an admission of fault or liability.
LBS may periodically perform commercially reasonable security activities including vulnerability assessments, dependency scanning, security updates, infrastructure monitoring, application testing, and logging review.
LBS is not obligated to disclose confidential security procedures, penetration testing reports, source code, or proprietary security documentation except where required by applicable law or expressly agreed in writing.
LBS maintains commercially reasonable business continuity and disaster recovery practices intended to support restoration of critical services following significant operational disruptions. Recovery objectives may vary depending on the nature of the incident and available infrastructure. While LBS strives to maintain service availability, uninterrupted operation cannot be guaranteed.
LBS implements reasonable measures intended to maintain the integrity of Customer Data during processing. Customers acknowledge that:
Although LBS employs industry-standard safeguards, no internet-connected service or cloud platform can guarantee absolute security. Accordingly, LBS does not warrant that the Service will be immune from cyberattacks, unauthorized access attempts, distributed denial-of-service attacks, internet outages, hardware failures, software defects, force majeure events, or other circumstances beyond LBS's reasonable control.
Both parties acknowledge that cybersecurity is a shared responsibility requiring appropriate safeguards by both LBS and the Customer.
To provide and support the Work-A-Beez platform, Linton Business Solutions, LLC ("LBS") may engage carefully selected third-party service providers ("Subprocessors") to process Customer Personal Data on its behalf. Examples of Subprocessors may include providers of:
Current major service providers include, where applicable:
LBS may replace or add Subprocessors as business needs evolve.
LBS shall use commercially reasonable efforts to ensure that each Subprocessor is contractually obligated to:
LBS remains responsible for the performance of its Subprocessors to the extent required by applicable law and the Agreement.
If a Customer reasonably believes that a newly appointed Subprocessor presents a material risk to Customer Personal Data, the Customer may submit a written objection explaining the basis of the concern.
Upon receipt of a reasonable objection, LBS may, at its sole discretion:
Nothing in this section requires LBS to disclose confidential agreements or proprietary information relating to its Subprocessors.
Where required by applicable law and commercially reasonable, LBS will assist the Customer in responding to verified requests from Data Subjects regarding Personal Data processed through the Work-A-Beez platform. Assistance may include support relating to:
The Customer remains solely responsible for determining whether a request is legally valid and for responding to Data Subjects. LBS is not responsible for making legal determinations regarding Customer obligations.
If LBS receives a request directly from an employee or other Data Subject relating to Customer Personal Data, LBS may:
Except where prohibited by law, LBS will not disclose Customer Personal Data directly to the requesting individual without Customer authorization.
LBS may disclose Customer Personal Data when required to do so by court order, subpoena, search warrant, government agency, regulatory authority, or other legally binding legal process.
Where legally permitted, LBS will make commercially reasonable efforts to notify the affected Customer before disclosure.
Nothing in this DPA requires LBS to violate applicable law or lawful governmental directives.
Upon reasonable request and where commercially feasible, LBS may provide Customers with information reasonably necessary to demonstrate compliance with this DPA. Examples may include:
LBS is not required to disclose proprietary source code, internal security procedures, penetration testing reports, vulnerability assessments, internal audit reports, trade secrets, or information that could compromise platform security.
Recognizing the shared importance of security and privacy, Customers may request reasonable information regarding LBS's data protection practices. To avoid disruption of operations and protect confidential information:
LBS may satisfy audit requests through existing documentation rather than onsite inspections where appropriate.
Work-A-Beez is operated primarily from the United States. Customer Personal Data may be processed or stored within the United States and, where necessary to provide the Service, may be processed by authorized Subprocessors in other jurisdictions.
Customers acknowledge that privacy laws outside the United States may differ from those in their home jurisdiction. Where required by applicable law, LBS will implement appropriate safeguards for international transfers.
Unless otherwise agreed in writing, LBS does not guarantee that Customer Data will remain within any particular geographic region. Customers with regulatory requirements regarding data residency should contact LBS before subscribing to determine whether specialized arrangements are available.
Where legally permitted and commercially reasonable, LBS will cooperate with Customers regarding regulatory inquiries relating to Personal Data processed through the Work-A-Beez platform. Such cooperation may include providing relevant documentation, information regarding processing activities, security information, and compliance-related records.
Customers remain responsible for communications with regulators and for satisfying their own legal obligations.
Customers are solely responsible for ensuring that Personal Data entered into Work-A-Beez is accurate, complete, current, and lawfully collected. LBS does not independently verify the accuracy of Customer Data.
LBS endeavors to incorporate commercially reasonable privacy and security considerations into the design and operation of the Work-A-Beez platform, including:
Privacy and security controls may evolve over time as technology and industry standards change.
If applicable privacy laws materially change after the Effective Date of this DPA, LBS may update its privacy and data protection practices as reasonably necessary to maintain compliance. Updated practices may be reflected in revised versions of this DPA, the Privacy Policy, or related documentation.
Continued use of the Work-A-Beez Service after such updates constitutes acceptance of those changes unless otherwise prohibited by applicable law.
Linton Business Solutions, LLC ("LBS") will retain Customer Personal Data only for as long as necessary to:
Retention periods may vary depending on the category of data, legal requirements, and operational needs. Customers are responsible for determining their own legal retention requirements for employment, payroll, tax, and workforce records.
Upon expiration or termination of the Agreement, the Customer may request the deletion of Customer Data, subject to applicable law and this DPA. Unless otherwise required by law or agreed in writing:
Deletion from backups may not occur immediately due to disaster recovery processes.
Where commercially available within the Work-A-Beez platform, Customers may export their data before account termination. LBS is not obligated to convert Customer Data into custom formats or perform manual data migration services unless separately agreed in writing. Professional data migration or export assistance may be offered as a paid professional service.
Following termination and expiration of applicable retention periods, LBS will securely delete or render inaccessible Customer Personal Data under its control unless continued retention is required by applicable law, court order, regulatory obligation, or legitimate business necessity expressly permitted under the Agreement.
This DPA is subject to the limitation of liability provisions contained in the Work-A-Beez Terms of Service. Except where prohibited by applicable law, LBS shall not be liable for indirect, incidental, consequential, special, or punitive damages, lost profits, lost business opportunities, loss of goodwill, or loss of anticipated savings.
Nothing in this DPA limits liability that cannot legally be limited under applicable law.
The Customer agrees to indemnify and hold harmless LBS from claims, damages, penalties, costs, and reasonable attorneys' fees arising from:
LBS shall not be liable for delays or failures to perform caused by events beyond its reasonable control, including natural disasters, acts of government, internet outages, cyberattacks by third parties, utility failures, labor disputes, war, terrorism, pandemics, civil unrest, or cloud infrastructure outages. LBS will use commercially reasonable efforts to restore services following such events.
LBS may update this DPA from time to time to reflect changes in applicable law, improve security practices, add or replace subprocessors, support new platform functionality, or address operational or regulatory requirements. Material changes will become effective in accordance with the notice provisions contained in the Terms of Service.
If any provision of this DPA is determined to be invalid or unenforceable, the remaining provisions shall remain in full force and effect. The invalid provision shall be interpreted or modified to the minimum extent necessary to make it enforceable while preserving its intended purpose.
In the event of a conflict, the following shall govern in this order with respect to the processing of Personal Data: (1) this Data Processing Addendum; (2) the Work-A-Beez Terms of Service; (3) the Privacy Policy.
This DPA shall be governed by and construed in accordance with the laws of the State of Texas, without regard to its conflict of law principles. Any legal action arising from this DPA shall be brought exclusively in the state or federal courts located within the State of Texas, unless applicable law requires otherwise.
This DPA, together with the Terms of Service, Privacy Policy, and any executed Order Forms or Subscription Agreements, constitutes the entire agreement between the parties regarding the processing of Customer Personal Data.
The following provisions survive termination of the Agreement to the extent applicable: confidentiality; data security obligations; limitation of liability; indemnification; governing law; dispute resolution; outstanding payment obligations; data deletion obligations; and record retention obligations.
LBS maintains a security program designed to protect Customer Data using commercially reasonable administrative, technical, and physical safeguards. Security measures may include:
Administrative Controls
Technical Controls
Physical Controls
Where infrastructure is hosted by third-party cloud providers, physical security measures are implemented by those providers and may include:
The Work-A-Beez platform may process the following categories of information on behalf of Customers:
Data Protection Contact
Linton Business Solutions, LLC
Work-A-Beez Privacy Office
616 FM 1960 Road West
Houston, Texas 77090
United States
Email: info@lbsconnect.net
General Support: info@lbsconnect.net
Website: www.workabeez.net
By using the Work-A-Beez Service or entering into a subscription agreement with Linton Business Solutions, LLC, the Customer acknowledges that it has read, understood, and agrees to be bound by this Data Processing Addendum.
Last updated: July 24, 2026