Data Processing Terms
1. Scope
These terms are part of the Terms of Service. They apply when SLSBMB Limited ("SLSBMB") processes personal data for a customer through SLSBMB AI, for example recipient and contact data, campaign emails and replies, and data about the customer's team members in its workspace.
2. Roles
The customer is the controller (data user) of that personal data and decides why and how it is used. SLSBMB processes it as a processor (data processor) on the customer's documented instructions, which are the Terms, the customer's orders and the customer's configuration and use of the Service. SLSBMB is an independent controller, not a processor, for account, billing, payment, legal-acceptance, audit, security and abuse-prevention records, for suppression lists that apply across workspaces, for deliverability protection and for improving the Service.
3. Customer obligations
The customer is responsible for the lawfulness of its instructions and of its use of the data, including the lawful basis, notices, consents where required, opt-outs, suppression and recipients' rights, as set out in the Outbound Compliance Policy. The customer may give SLSBMB only data it is authorised to provide and use for the Service.
4. SLSBMB obligations
- Process the data only to provide the Service on the customer's instructions, unless the law requires otherwise.
- Ensure that people authorised to process the data are bound by confidentiality.
- Use reasonable technical and organisational security measures, as described on the Security page.
- Use subprocessors in the categories listed on the Subprocessors and Providers page, which the customer authorises generally, and require appropriate protection from them.
- Tell the customer without undue delay after becoming aware of a personal data breach affecting the customer's data.
- Give reasonable help with data-subject requests and with information the customer reasonably needs to show compliance, at the customer's cost where the help goes beyond the Service's ordinary functions.
- When the workspace is closed, delete the customer's personal data, except where the law requires or permits SLSBMB to keep it and except the records described in the Privacy Notice.
5. International transfers
The customer authorises processing in Hong Kong and in the other countries where SLSBMB and its providers operate. If the customer's law requires a specific transfer mechanism, the customer must tell SLSBMB before giving it the data.
6. Liability
These terms are subject to the disclaimers, limitation of liability and indemnity in the Terms of Service. The customer indemnifies SLSBMB against claims, fines and losses arising from unlawful instructions or from the customer's use of the data. Requests: a@slsbmb.com.