Service Providers Agreement
ZTrucking Group Corp ("ZTRUCKING") engages service providers to support our operations and deliver services to our clients. This agreement outlines the responsibilities and obligations of service providers regarding the handling of data and documents shared between ZTRUCKING and our mutual clients. This agreement is governed by the laws of the State of North Carolina, United States, and applicable federal regulations, including but not limited to data privacy and security laws.
Strict Confidentiality and Data Protection: Service providers are bound by strict confidentiality obligations. All data and documents shared, collected, or processed on behalf of ZTRUCKING and our clients are considered confidential and proprietary. Service providers must implement and maintain robust security measures to protect this information from unauthorized access, use, disclosure, alteration, or destruction. This includes, but is not limited to, encryption, access controls, and regular security audits.
Data Sharing as a Mediator: ZTRUCKING operates as a data mediator, facilitating the secure exchange of information between our clients and service providers. Any data sharing will occur solely as instructed by our clients and in accordance with our contractual agreements. Service providers must not use, share, or disclose any client data for any purpose other than those explicitly authorized by ZTRUCKING and our clients.
Prohibition of Unauthorized Data Use: Service providers are strictly prohibited from:
- Selling, renting, or trading client data.
- Using client data for marketing or any other purpose not authorized by ZTRUCKING and our clients.
- Disclosing client data to any third party without explicit written consent from ZTRUCKING and our clients, except as required by law.
- Attempting to access or obtain data beyond the scope of their authorized access.
Data Breach and Violation Response: In the event of a suspected or confirmed data breach, unauthorized access, or any other violation of this agreement, service providers must immediately notify ZTRUCKING. Service providers will cooperate fully with ZTRUCKING in investigating and remediating the breach or violation. Any violation of this agreement may result in immediate termination of the service provider relationship and may be subject to legal action.
Compliance with Laws and Regulations: Service providers must comply with all applicable federal and state laws and regulations related to data privacy and security, particularly those relevant to the transportation and logistics industry. This includes, but is not limited to, the following:
- Federal Motor Carrier Safety Administration (FMCSA) Regulations: Including rules related to driver data, vehicle information, and electronic logging devices (ELDs).
- State-Specific Data Privacy Laws: Such as the North Carolina Identity Theft Protection Act, and any other relevant state regulations regarding the handling of personal and business data.
- Federal Data Security Standards: Including but not limited to industry best practices for data encryption, access controls, and security incident response.
- Payment Card Industry Data Security Standard (PCI DSS): If applicable, for service providers handling payment card information.
- Any other relevant industry-specific data protection and privacy laws.
Service providers will provide ZTRUCKING with evidence of compliance, including relevant certifications and audit reports, upon request. Furthermore, service providers are required to notify ZTRUCKING immediately of any changes in their compliance status or any potential or actual data breaches.
Audit and Monitoring: ZTRUCKING reserves the right to audit and monitor service providers' compliance with this agreement. Service providers will grant ZTRUCKING access to their systems and records as necessary for auditing purposes.
Indemnification: Service providers agree to indemnify and hold ZTRUCKING harmless from any claims, losses, damages, liabilities, or expenses arising from their breach of this agreement or their negligence in handling client data.
Termination: This agreement may be terminated by ZTRUCKING for any reason, including but not limited to non-compliance with its terms. Upon termination, service providers must securely delete or return all client data and documents as directed by ZTRUCKING.