Data Processing Agreement

Effective date: 16.02.2026

This Data Processing Agreement ("DPA") forms part of the Terms of Service of HelloClient.

This Data Processing Agreement ("DPA") forms part of the Terms of Service of HelloClient and applies where the Customer processes personal data using the HelloClient platform.

1. Parties

This DPA is entered into between:

2. Purpose

This DPA governs the processing of personal data by Processor on behalf of Controller in connection with the provision of the HelloClient CRM platform.

3. Scope of Processing

Processor processes personal data solely for the purpose of providing the HelloClient services.

Processing may include:

• storage
• organization
• retrieval
• use
• deletion

The duration of processing corresponds to the duration of the Customer's account.

4. Categories of Data

Personal data may include:

• names
• phone numbers
• email addresses
• addresses
• order information
• notes entered by the Customer

The platform is not intended for processing special categories of personal data.

5. Obligations of the Processor

Processor shall:

• process personal data only on documented instructions from the Customer
• ensure that persons authorized to process personal data are subject to confidentiality obligations
• implement reasonable technical and organizational security measures
• assist the Customer where reasonably possible in fulfilling data protection obligations
• delete or return personal data upon termination of the services

6. Obligations of the Customer

Customer is responsible for:

• ensuring a lawful basis for processing personal data
• informing data subjects
• complying with applicable data protection laws
• ensuring that uploaded data does not violate applicable laws

7. Sub-processing

Processor may use third-party service providers to support the delivery of services, including:

• cloud infrastructure providers
• payment service providers
• analytics providers

Processor ensures that such providers are bound by appropriate confidentiality and data protection obligations.

8. Data Security

Processor implements reasonable security measures, including:

• encrypted connections (HTTPS)
• secure cloud hosting infrastructure
• access control mechanisms

9. Deletion of Data

Upon termination of the Customer's account, personal data will be deleted within a reasonable period, unless retention is required by law.

10. Governing Law

This DPA is governed by the law specified in the Terms of Service .