Business Data Processing Terms

1. Scope and roles

These terms apply where a business customer (“Customer”) is a controller of personal data in Customer Content and SEER Innovations Ltd, company number 17100455, processes that data on the Customer’s behalf as processor. They form part of the SkilzVolt Terms of Service. Each party remains responsible for its own compliance with UK GDPR, the Data Protection Act 2018 and other applicable data-protection law.

2. Processing details

• Subject matter: hosting, versioning, governance, retrieval, export and agent access for Customer Content.
• Duration: for the Customer’s use of the service and the deletion/backup period that follows.
• Nature and purpose: storage, organisation, search, review workflows, audit history, support, security, backup and Customer-enabled AI processing.
• Data subjects: Customer staff, contractors, clients, suppliers or other people described in Customer Content.
• Personal data: names, work contact details, roles, account identifiers, activity records and any personal data the Customer chooses to include in skills or resources.
• Sensitive data: not intended for special-category or criminal-offence data unless separately agreed in writing.

3. Documented instructions

We process Customer personal data only on documented instructions contained in the Terms, the Customer’s configuration and authorised use of the service, unless law requires otherwise. If we believe an instruction infringes applicable data-protection law, we will inform the Customer unless prohibited by law.

4. Confidentiality and security

People authorised to process Customer personal data are bound by confidentiality. We maintain technical and organisational measures appropriate to the risk, including access controls, authentication, encrypted transport, credential hashing where applicable, logging, backup, vulnerability and incident-management practices. No system is risk-free; measures are reviewed as the service and risks evolve.

5. Subprocessors

The Customer gives general authorisation to use the subprocessors listed on our Subprocessor List. We remain responsible for their processing under our agreement and require materially equivalent data-protection obligations. We will give reasonable notice of a material new subprocessor where practical. A Customer may raise a reasonable data-protection objection by contacting hello@skilzvolt.com.

6. International transfers

Where personal data is transferred outside the UK to a country without an adequacy regulation, we will use an appropriate transfer mechanism, such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses, together with supplementary measures where required.

7. Assistance and incidents

Taking account of the processing and information available to us, we will reasonably assist the Customer with data-subject requests, security obligations, breach assessment, data-protection impact assessments and regulator consultation. We will notify the Customer without undue delay after becoming aware of a personal-data breach affecting Customer personal data and provide available information needed for the Customer’s obligations.

8. Return and deletion

During the service, Customers may retrieve Customer Content through the MCP skills_export_all tool or request an assisted export from us. On termination or written instruction, we will delete or return Customer personal data within the period stated in the Privacy Notice, unless law requires retention. Residual encrypted backups are removed through the ordinary backup lifecycle and remain protected and inaccessible for normal use until deletion.

9. Information and audits

We will make information reasonably necessary to demonstrate compliance with these processor obligations available to the Customer. Audits must be proportionate, protect other customers and our security, use existing independent reports first where available, and be arranged on reasonable notice no more than once annually unless a substantiated incident or regulator requires otherwise.