This agreement applies when OmniMark processes personal data for you as your processor (GDPR Article 28 and similar laws). It forms part of the Terms of Service. A countersigned copy is available on request.

Scope

Subject matter: providing the OmniMark service. Duration: as long as your workspace exists. Data subjects: your contacts, customers, leads, website visitors and team members. Data: contact details, communication content, call recordings, booking and payment status, and anything else you put in.

Our commitments

Process only on your documented instructions; keep staff bound to confidentiality; apply the security measures on our Security page; help you answer data-subject requests (export and deletion tools are in the app); help with impact assessments; tell you without undue delay, and within 72 hours, after we learn of a personal-data breach affecting you.

Sub-processors

You authorise the sub-processors on our Sub-processors page. We impose equivalent data-protection terms on them, and give at least 30 days' notice of new ones so you can object.

Transfers

Transfers outside the EEA/UK rely on the Standard Contractual Clauses or another valid mechanism.

End of processing

When you delete your workspace, we erase the data after the 30-day grace period; copies in encrypted backups expire within 6 months.

Audits

We provide the information needed to show compliance and allow reasonable audits with notice.