This Data Processing Agreement ("DPA") forms part of the Terms of Service between EmailsAndMore ("Processor") and the Customer ("Controller") and applies when EmailsAndMore processes personal data on the Customer's behalf.
1. Subject matter
EmailsAndMore processes personal data only to provide the contracted services — sending email, tracking engagement, managing contacts, and related analytics.
2. Duration
This DPA remains in force for the term of the underlying subscription and any required retention period thereafter.
3. Nature and purpose of processing
Hosting, storing, transmitting, and analyzing Customer Content (contacts, campaigns, engagement events) to deliver the platform's features.
4. Categories of data subjects and data
Data subjects include the Customer's recipients and end users. Data may include name, email address, IP address, device information, and engagement events.
5. Processor obligations
- Process personal data only on documented instructions from the Controller.
- Ensure personnel handling personal data are bound by confidentiality.
- Implement appropriate technical and organizational measures (encryption in transit and at rest, access controls, logging, regular reviews).
- Assist the Controller with data-subject requests and regulatory obligations.
- Notify the Controller without undue delay after becoming aware of a personal-data breach.
6. Subprocessors
EmailsAndMore engages vetted subprocessors (cloud hosting, payment processing, mail relay infrastructure) under written agreements that impose equivalent data-protection obligations. A current list is available on request.
7. International transfers
Where personal data is transferred outside the EEA/UK, EmailsAndMore relies on Standard Contractual Clauses or another lawful transfer mechanism.
8. Audits
The Controller may, upon reasonable notice and not more than once per year, request information necessary to demonstrate compliance with this DPA.
9. Return or deletion
On termination, EmailsAndMore will delete or return Customer personal data within a reasonable period, subject to legal retention requirements.
10. Contact
To execute this DPA or request the subprocessor list, email info@emailsandmore.in.