Data Processing

Who Does What

When we host, support or build systems that hold personal data for your business, you are the data controller and Crushed Ice acts as your data processor. We process that data only to provide the services you have asked us for.

Part of Our Terms

This page and our sub-processors list form part of our Terms of Use. They apply to every client, whatever services you take from us. There is nothing separate to sign.

What We Commit To

As your processor under Article 28 of the UK GDPR, we:

• process personal data only on your documented instructions;
• make sure everyone who has access to it is bound by confidentiality;
• keep appropriate technical and organisational security measures in place;
• use sub-processors only under written contracts with equivalent data protection obligations, and keep our sub-processors list up to date;
• help you respond to people exercising their data protection rights;
• tell you without undue delay if we become aware of a personal data breach affecting your data;
• delete or return your data when our services end, unless the law requires us to keep it; and
• give you the information you need to show compliance, and allow for audits.

Where Data Is Held

Our systems are hosted in the UK on Amazon Web Services (AWS). The sub-processors list says what each provider does and where it processes data.

Your Own Personal Data

For your contact details, billing records and visits to this website, we are the controller rather than your processor. Our Privacy Policy covers those.

Contact

Questions about how we process data can be sent through our contact page.