Legal · Draft, needs a lawyer
Data processing agreement
Last updated 31 October 2026. This forms part of the terms for any workspace handling personal data.
Who does what
You decide why your customers' data is processed, so you're the controller. RelayHelp processes it for you, so we're the processor.
What we process
Messages, names, email addresses and basic device details from your customers, and account details for your team, for as long as your workspace runs, to provide the service.
Your instructions
We only process this data as you instruct us through the product and the terms, unless the law requires otherwise, and we'll tell you if it does.
Keeping it safe
We use TLS in transit, limit access, log actions and keep backups. Anyone who handles this data is bound to keep it confidential.
Subprocessors
You agree to the providers listed in our Privacy policy. We'll give you 30 days' notice before adding one so you can object, and we stay responsible for their work.
Breaches
If personal data in our care is breached, we'll tell you without undue delay and within 48 hours of finding out, with what we know.
Helping you
We'll help you answer your customers' requests, and with impact assessments and regulators, where that's reasonable.
Deletion
When your workspace closes, we delete this data within 30 days, unless the law requires us to keep it. Backups roll off on their normal schedule.
Transfers
Where data leaves the EU, UK or Nigeria, we rely on a lawful transfer mechanism, such as standard contractual clauses.
Checking on us
We'll answer reasonable security questions and give you what you need to show we're meeting this agreement. Write to [email protected].