Data Processing Terms

Last updated: 14 July 2026

When your website collects personal data from its visitors (for example, a contact-form enquiry), you are the data controller and Vetrosoft acts as your data processor. These terms describe that relationship.

1. Scope & roles

We process visitor personal data only to operate your website and deliver enquiries to you, on your documented instructions, for no other purpose.

2. Sub-processors

• Cloudflare: hosting, CDN, object storage.
• Brevo (and Resend as failover): email delivery of contact-form messages to you.
• Stripe: your own subscription billing (not visitor data).

3. Security

Data is transmitted over TLS and stored with access controls. The consent audit log is kept in a private, non-public bucket.

4. Data subject requests & deletion

If one of your visitors asks to access or delete their data, tell us and we will help you fulfil it. On termination we delete or return the personal data we hold for you, subject to legal retention.

5. International transfers

Our processors may store data in the EU/EEA or under equivalent safeguards (Standard Contractual Clauses where applicable).