Data processing agreement — stub
This is a blank structure for counsel. It is not a signed contract. No client has a signed copy stored in this repository.
- Parties: client (controller) and Oniyore (processor).
- Subject matter: hosting and operating the client’s site, lead forms, and related mail. Scope per statement of work. TBD.
- Duration: TBD.
- Nature of processing: store and transmit the fields the client’s forms collect. TBD per client.
- Subprocessors: the published list, updated when the code inventory changes.
- International transfers: mechanism TBD. Do not assume a framework is in place.
- Breach: processor follows
docs/compliance/incident-process.md, including notice to the client controller. Timing in that draft includes 72 hours to a supervisory authority where GDPR or UK GDPR applies. - Deletion or return at the end of the service: TBD. The current privacy page copy mentions an export and a 90-day operational hold; that sentence is not this clause.
- Signatures: blank. Postal address for notices: 1280 Lexington Ave FRNT 2 #1079, New York, NY 10028, United States.
Sale and share
Oniyore does not sell or share personal information as those terms are defined under the CCPA/CPRA. Non-essential tags stay off when a visitor opts out or sends Global Privacy Control.
No Global Privacy Control signal on this response.