Data-processing terms
These terms apply when a host or organisation uses LockChimp to process guest, cleaner, contractor or visitor data. The host is the controller and Robert Welsh is the processor.
Postal address c/o Carter & Co 19 Warren Park Way Enderby Leicester LE19 4SA United Kingdom
Instructions and purpose
We process names, optional recipient email addresses, access windows, encrypted PINs, lock identifiers and lock events only to provide, secure and support LockChimp, on your documented instructions expressed through the service and support requests.
Confidentiality and security
People authorised to process customer data must keep it confidential. We use access controls, HTTPS, encryption of stored SmartThings tokens and PINs, secret redaction, operational monitoring and controlled backups.
Subprocessors
You authorise the providers listed in the privacy notice. We remain responsible for imposing appropriate data-protection obligations on subprocessors. We will give reasonable notice of a material new subprocessor.
Requests, incidents and deletion
We will provide reasonable assistance with data-subject requests, security incidents and compliance information. We will notify affected controllers without undue delay after confirming a personal-data breach. On account deletion we remove live account data, subject to limited backup retention and legal obligations.
International transfers
Where data leaves the UK or EEA, we rely on an adequacy decision, approved contractual safeguards or another lawful transfer mechanism provided by the relevant subprocessor.
Audit information
We will make reasonable security and compliance information available. Formal on-site audits are not included. Mandatory legal rights remain unaffected.
Questions should be sent to Robert Welsh.