NubixlyData Processing Agreement
Last updated: 10 September 2026
Template notice. This document is a starting template provided with your site. Review it with a qualified legal advisor and adapt it to your jurisdiction before relying on it.
1. Roles
Where Nubixly hosts a CRM for you, you are the controller of the personal data stored in it and Nubixly is the processor. This agreement supplements our Terms of Service.
2. Scope of processing
Subject matter: provision, hosting and support of your CRM.
Duration: the term of your agreement, plus the export window.
Nature and purpose: storage, retrieval, backup, transmission and support.
Data subjects: your staff, customers, prospects and contacts.
Categories: contact details, communication records, commercial records and any other data you choose to store.
3. Our obligations
We process personal data only on your documented instructions; ensure staff with access are bound by confidentiality; implement appropriate technical and organisational security measures; and assist you with data subject requests and security obligations so far as reasonably practicable.
4. Sub-processors
We use a limited set of sub-processors for hosting, email delivery and monitoring. We remain responsible for their performance and will inform you of intended changes, giving you the opportunity to object.
5. Security
Measures include encryption in transit, per-customer instance isolation, access control on a least-privilege basis, regular backups, and patching of the underlying platform.
6. Personal data breach
We will notify you without undue delay after becoming aware of a personal data breach affecting your data, with the information reasonably available to us.
7. International transfers
Where personal data is transferred outside its country of origin, we put appropriate safeguards in place as required by applicable law.
8. Audit
On reasonable written request, and no more than once a year unless required by a regulator, we will provide information necessary to demonstrate compliance with this agreement.
9. Deletion and return
On termination we make your data available for export for a reasonable period, then delete it from active systems, with backups expiring on their normal cycle.
10. Contact
Data protection queries: hello@nubixly.com