Data processing
Data processing agreement
This agreement applies when you import into your workspace personal data about your clients and their people.
Roles
You are the controller for the content you import. PREST OFFICE LIMITED acts as processor and handles that data only on your documented instructions, of which using the service forms part.
Subject matter and duration
The processing covers the storage, organisation and analysis of the project exchanges you supply. It lasts as long as your workspace exists, then ends under the deletion arrangements described in the privacy notice.
Categories of people and data
The people concerned are your clients, their staff and any contributors you work with. The data is whatever appears in the exchanges you choose to import: professional identities, email addresses, message and transcript content.
Security
Workspace isolation enforced at database level, encryption in transit and at rest, separate encryption of access tokens for third-party apps, access logging, and least privilege for internal access.
Sub-processors
We use the providers listed on the Subprocessors page. Any addition is published there before it goes live, which leaves you the option of objecting by terminating.
Assistance
We help you answer data subject requests, document your impact assessments and handle a data breach. A breach is reported to you without undue delay after we become aware of it.
What happens to the data
At the end of the relationship, you export your data from your workspace. After the grace period, the data is deleted from our live systems, then from backups as they rotate.
A question about this document?
Write to us. We answer ourselves, within two working days.
Contact us