Scope and roles
These terms form part of the agreement between READYHT LTD and the business using InvoiceKO. For personal information the business supplies for its own purposes, the business is controller and READYHT LTD is processor. The privacy policy separately explains information for which we are controller.
These terms do not make us your tax agent or accountant.
Processing details
The subject matter is providing the InvoiceKO workspace for the duration of your use and the applicable return or deletion period. Processing includes collection, organisation, storage, retrieval, calculation, export, sharing at your direction and deletion. Data can concern customers, suppliers, employees, contractors and other people in your records.
It can include names, contact details, invoice and payment information, bank details, tax references and documents. The service is not intended for unnecessary special category data or criminal offence data.
Your instructions
Your use of supported functions and written instructions consistent with the service define our instructions. We process personal information only on documented instructions unless law requires otherwise. We will inform you of such a legal requirement unless prohibited and tell you if we consider an instruction infringes applicable data protection law.
You are responsible for a lawful basis, appropriate notices and the accuracy of your records.
Confidentiality and security
We will restrict access to authorised people subject to confidentiality obligations and maintain technical and organisational measures appropriate to the processing risks. Measures include access controls, encrypted transport and separation of customer access.
You are responsible for your devices, authorised users and account security. We will notify you without undue delay after becoming aware of a personal data breach affecting data we process for you and provide available information needed for your response.
Processing on our behalf
You give general authorisation for subprocessors supporting hosting, authentication, storage, security and the connected functions you request. Contact admin@readyht.com for the current register, processing locations and safeguards before giving processing instructions.
We will impose required data protection obligations on subprocessors and remain responsible for their performance of those obligations. We will give advance notice of intended additions or replacements so you have a reasonable opportunity to object on data protection grounds before the affected processing starts.
Contact admin@readyht.com to raise an objection and discuss an alternative or ending the affected service. Independent controllers such as HMRC are identified separately.
Rights, assessments and evidence
Taking account of the nature of processing and information available, we will assist with data subject requests, security obligations, breach notifications, impact assessments and regulatory consultation. We will make information needed to demonstrate compliance available and allow audits required by applicable law under reasonable arrangements that protect other customers and confidential information.
Send requests to admin@readyht.com.
Transfers
We will not make a restricted international transfer on your behalf without the protections required by applicable data protection law. Relevant arrangements can include adequacy decisions or appropriate contractual safeguards with any necessary additional measures.
Contact us for the arrangements applying to the service you intend to use. Optional connected functions remain subject to the applicable transfer assessment and configuration.
Return and deletion
At the end of the service, we will return or delete personal information processed for you as you instruct unless law requires retention. Use available exports before closing your account and contact us for assistance with information not included in those exports.
Residual backup copies remain restricted from ordinary use until replaced under applicable retention arrangements. We will explain any retention required by law.