Line is a trading name of IMPCT Ltd. Company number 15922036. Registered address: Dores Lane, Romsey, SO51 0QJ. ICO registration: 00015961662.

This agreement forms part of the Terms of Service. The customer is the controller and IMPCT Ltd is the processor for contact and communications data handled through Line.

1. Processing

We process customer contacts, messages, call audio, transcripts, files and related metadata to provide the service during the customer's account term. The people include the customer's callers, message recipients and team members. The customer gives instructions through the service settings, the Terms and written support requests. We tell the customer if an instruction appears to breach data protection law, unless the law prevents us from doing so.

2. Confidentiality and security

We restrict access to people who need it to provide or support the service. They must keep the data confidential. We use access controls, encryption in transit and at rest, monitoring and tenant isolation. We review the security measures as technology changes.

3. Sub-processors and transfers

The customer gives general authorisation for the providers on our sub-processor list. We require each sub-processor to protect data under obligations equivalent to this agreement. We give subscribed customers 30 days' notice before a new sub-processor processes customer data. The customer may object in writing on reasonable data protection grounds. We will discuss a remedy. We use a lawful UK transfer mechanism for restricted international transfers.

4. Assistance

We assist the customer, taking account of the processing and the information available to us, with data subject requests, security incidents, impact assessments and prior consultation with regulators. The customer remains responsible for its own lawful basis, notices and responses to data subjects.

5. Breaches

We tell the customer without undue delay after we become aware of a personal data breach affecting its data. We provide available information to help the customer assess and report the breach.

6. Return, deletion and audit

At the end of the service, the customer may request a copy of its data. We delete or return customer data under the retention schedule, unless law requires storage. We make information needed to demonstrate compliance available to the customer and allow reasonable audits, subject to confidentiality and security safeguards.

7. Contact

Send instructions or questions to privacy@useline.io.