1. Roles

For personal data entered by the customer into Inventro, the customer is controller and Vivid Telecom Limited is processor, unless the parties agree otherwise in writing.

2. Processing instructions

We will process customer personal data only on documented instructions, including these terms, the customer’s configuration and support requests, unless law requires otherwise.

3. Confidentiality and security

Personnel with access are bound by confidentiality. We maintain proportionate technical and organisational measures appropriate to the risk.

4. Subprocessors

The customer gives general authorisation for subprocessors needed to host, secure, communicate, support and bill for the Service. We remain responsible for imposing appropriate data-protection obligations. Material changes will be notified where reasonably practical.

5. Assistance

Taking account of the nature of processing, we will reasonably assist with data-subject requests, security assessments, breach obligations and regulatory enquiries. Substantial bespoke assistance may be chargeable.

6. Personal-data breaches

We will notify the customer without undue delay after becoming aware of a personal-data breach affecting customer data and provide information reasonably available to support the customer’s obligations.

7. Return and deletion

At the end of the Service, we will delete or return customer personal data in accordance with the platform’s export and retention arrangements, unless law requires retention.

8. Audits

We will provide information reasonably necessary to demonstrate compliance. Audits must be proportionate, protect other customers and confidential information, and normally use existing reports before an on-site inspection.

9. International transfers

Restricted transfers will use a lawful transfer mechanism.

Inventro is owned and operated by Example Company Ltd.