GDPR Compliance
How we handle personal data for customers and end users in the EU/EEA, and where the General Data Protection Regulation (GDPR) applies to our services.
Last updated: [Effective Date]
On this page
GDPR overview
The GDPR is the European Union's data protection law, governing how personal data of people in the EU/EEA is collected, processed, and stored. It applies to our platform whenever our customers send messages/calls to, or otherwise process personal data of, individuals in the EU/EEA.
Our role: controller and processor
For account and billing data of our own customers, we act as a data controller. For message/call content our customers send through the platform to their own end users, we act as a data processor, processing that data only on the customer's documented instructions.
Data subject rights
Where GDPR applies, individuals have the right to:
- Access the personal data we (or our customers, via us) hold about them
- Request correction of inaccurate data
- Request erasure ("right to be forgotten"), subject to legal retention requirements
- Object to or restrict certain processing
- Request data portability
- Withdraw consent, where processing is based on consent
To exercise any of these rights, use the contact details on our Contact page or in the section below.
Data protection measures
We apply administrative, technical, and physical safeguards to protect personal data, described further in our Security & Data Protection page. We do not claim any specific third-party security certification beyond what is stated there.
Data retention
Personal data is retained only as long as necessary for the purposes it was collected for, or as required by applicable law. [Specify retention periods per data category]
Third-party processing
Where we use sub-processors (e.g. hosting or delivery partners) to provide the Services, they are bound by confidentiality and data protection obligations at least as strict as those in this policy. [List sub-processors and their locations, if required for your DPA]
Data Processing Agreement
Enterprise customers who need a signed Data Processing Agreement (DPA) covering our processing of their end users' personal data can request one through our Contact page.
Contact our DPO
For GDPR-related questions or to exercise your data subject rights, contact:
- Data Protection Officer / contact: [DPO name or team]
- Email: [dpo@promomarketingsolution.com]