Data Processing Addendum
The terms under which COLDPOST processes personal data on your behalf as your processor.
This Data Processing Addendum (DPA) forms part of the agreement between you (the controller) and COLDPOST Inc. (the processor) and reflects our commitments under applicable data protection laws.
Roles of the parties
For personal data processed through the service, you act as the controller and COLDPOST acts as the processor, processing data only on your documented instructions.
Scope of processing
- Subject matter: provision of the COLDPOST outbound platform.
- Duration: the term of your subscription plus any retention period.
- Nature and purpose: research, personalization, sending, and deliverability monitoring.
- Categories of data subjects: your prospects and contacts.
Sub-processors
We engage vetted sub-processors to deliver the service and impose data-protection obligations on them equivalent to those in this DPA. A current list is available on request, and we provide notice of changes so you may object.
Security measures
We maintain the technical and organizational measures described on our Security page, including encryption, access controls, and continuous monitoring.
See the Security page for the full list of safeguards referenced by this DPA.
Data subject requests
We will assist you in responding to requests from data subjects to exercise their rights, and will promptly forward any such requests we receive directly to you.
International transfers
Where personal data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses and supplementary measures as appropriate.
Breach notification
We will notify you without undue delay after becoming aware of a personal data breach affecting your data, and provide information reasonably needed to meet your reporting obligations.