Data Processing Agreement

Last updated: August 2026

1. Purpose

This agreement sets out the rules Iconwebly follows when processing personal data collected on our customers' sites. It is an integral part of the Terms of Service.

2. Determining the roles

For data visitors submit through the booking and contact forms on our customer's site, our customer is the data controller. Iconwebly acts as a data processor, processing this data solely to provide the Service and in accordance with our customer's instructions.

With respect to our customer's own account information, Iconwebly is the data controller; the Privacy Policy applies in that case.

3. Subject matter of processing

Categories of data: full name, email, phone number, appointment date/time, and free-text entered by the visitor in the form.

Data subjects: our customer's site visitors and prospective customers.

Purpose of processing: delivering booking and contact requests to the site owner, listing them in the panel, and sending notification emails.

4. Our obligations

• We process data only in accordance with the customer's instructions and as required by the Service.
• We do not use the data for our own marketing activities and do not sell it to third parties.
• We limit access to personnel who need it for their work; these personnel are bound by confidentiality.
• We apply appropriate technical and administrative security measures (encrypted connections, access control, backups).
• In the event of a data breach, we notify our customer without undue delay.
• If a data subject contacts us directly, we forward the request to our customer and provide reasonable support in responding to it.

5. Sub-processors

We rely on the following sub-processors to deliver the Service:

• Vercel — application hosting
• Supabase — database, authentication, file storage
• Resend — transactional email delivery

We will update this page if we change our list of sub-processors.

6. Customer obligations

Our customer is responsible for publishing the required privacy notice for the data collected on their site, obtaining explicit consent where required, and using the data for lawful purposes.

7. Termination

When the service relationship ends, we export the data to the customer or delete it at their request. If no request is made, we delete it after a reasonable period.

8. Contact

You can submit requests related to this agreement through our contact page.