Parties and scope
This addendum is between you, the customer ("controller"), and MRGN Ventures Ltd, a company registered in England and Wales under company number 17431712, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ ("processor", "we"). It forms part of our Terms of Service and applies wherever we process personal data on your behalf while providing gtm.help. It is made under Article 28 of the UK GDPR and the EU GDPR. If it conflicts with the Terms, this addendum wins on data protection.
What we process
- Subject matter: running gtm.help for you — plans, drafts, Sidekick chats, opportunity alerts and connected-account actions you request.
- Duration: for as long as your account is open, then until deletion as set out below.
- Data subjects: your team members and any people whose details you choose to enter, such as contacts or customers.
- Data types: names, email addresses, business details, messages and content you upload. We do not ask for special-category data and you agree not to send it.
Our commitments
- We process personal data only on your documented instructions, which are these terms and how you use the product.
- Everyone with access is bound by confidentiality.
- We keep appropriate technical and organisational measures in place, described on our Security page.
- We help you answer data subject requests and with impact assessments where reasonable.
- We tell you without undue delay, and within 72 hours where possible, after becoming aware of a personal data breach affecting your data.
- We make the information needed to show compliance available, and answer reasonable audit questionnaires once a year.
Sub-processors
You give general authorisation for the sub-processors listed in our Privacy Policy. Each is bound by data protection terms at least as protective as these. We will give at least 14 days' notice by email before adding or replacing one; you may object on reasonable grounds and, if we can't resolve it, cancel and receive a pro-rata refund of prepaid fees.
International transfers
Where personal data leaves the UK or EEA, transfers rely on the EU Standard Contractual Clauses with the UK International Data Transfer Addendum, an adequacy decision, or another approved safeguard.
Deletion and return
When your account closes we delete your personal data from live systems within 30 days and from encrypted backups within 90 days, unless the law requires us to keep it. You can export or request a copy beforehand through Your data.
Liability and law
The liability limits in the Terms apply to this addendum. It is governed by the laws of England and Wales.
Signed copy
No signature is needed for this addendum to apply. If your procurement process needs a countersigned copy, email team@gtm.help with your company name and address.