Legal & policy
Data Processing Agreement
This data processing agreement describes how Union Call Forms handles customer data when providing the phone intake service.
Roles
When processing call and form data on behalf of a customer, Union Call Forms acts as the data processor (service provider) and the customer acts as the data controller (business).
Instructions
We process personal data only on documented customer instructions and within the configured service, except where required by law.
Confidentiality and security
Our staff are bound by confidentiality obligations. We maintain access controls, incident response procedures and technical safeguards to protect customer data — see our security page for details.
Sub-processors
We engage the sub-processors listed on our sub-processors page. We notify customers of material changes to that list.
Deletion and return
At termination of service, customer data is returned or deleted on request, subject to any legal retention obligations.
Cross-border processing
Customer data is processed in the regions where our hosting and service infrastructure operates. Where data crosses borders, we apply appropriate transfer safeguards.