01Roles of the parties
For Customer Data containing personal data, the Customer is the controller and Selllution is the processor. Selllution processes such data only on the Customer's documented instructions, including as set out in the Terms of Service and this Addendum.
02Subject matter & duration
Processing continues for the term of the subscription and any wind-down period. The subject matter is the provision of the Platform; the nature and purpose is to host, process and make available Customer Data so the Customer can run its sales operations.
03Data & data subjects
04Processor obligations
- Process only on documented instructions.
- Ensure persons authorised to process are bound by confidentiality.
- Implement appropriate technical and organisational security measures.
- Assist the Customer with data-subject requests and with security, breach and impact-assessment obligations.
- Notify the Customer without undue delay on becoming aware of a personal-data breach.
05Sub-processors
The Customer authorises Selllution to engage sub-processors (such as hosting, payment, communications, screening and AI providers) under written terms imposing equivalent obligations. We maintain a current list and will give notice of intended changes, allowing reasonable objection.
06International transfers
Any transfer outside the UK is made with an appropriate transfer mechanism, such as the UK International Data Transfer Agreement or addendum to the EU Standard Contractual Clauses.
07Return & deletion
On termination, Selllution will, at the Customer's choice, return or delete Customer Data within a defined period, except where retention is required by law.
08Audits
Selllution will make available information necessary to demonstrate compliance and allow for audits, subject to reasonable confidentiality and security conditions.