Data processing agreement

Subject and duration

WAFL processes personal data only to provide the service, for as long as the client’s account is active and until deletion afterwards.

Nature, purpose and data

Purpose: answering visitors and callers, recording leads, handovers and calls, CRM, follow-ups, analytics and agents, as configured by the client.

Data subjects: the client’s website visitors, callers, customers and contacts, and the client’s users.

Personal data: names, contact details, messages and call transcripts, enquiry details, and pseudonymous visit identifiers. Clients should not configure the service to collect special category data.

WAFL’s obligations

Process personal data only on the client’s documented instructions (including the service’s settings).

Ensure people with access are bound by confidentiality.

Apply appropriate technical and organisational security measures, including encryption in transit and at rest, access control and separation of clients’ data.

Help the client respond to data subjects’ requests and with security, breach notification and impact assessments, as reasonably required.

Notify the client without undue delay, and within 48 hours where possible, after becoming aware of a personal data breach affecting the client’s data.

Delete or return the client’s personal data at the end of the service, unless the law requires storage.

Make available the information needed to demonstrate compliance and allow reasonable audits.

Sub-processors

The client authorises the sub-processors on the sub-processors page. WAFL will give at least 30 days’ notice of new sub-processors, during which the client may object. WAFL imposes equivalent data protection obligations on each sub-processor and remains responsible for them.

International transfers

Where personal data is transferred outside the UK or EEA, WAFL relies on the UK International Data Transfer Addendum, the EU standard contractual clauses or an adequacy decision or certification, as applicable.

Signing

For a signed copy for your records, email info@waflgroup.com with your business’s legal name and address.