This document reflects the current code and public service. Highlighted fields must be confirmed by qualified legal counsel before publication as a final legal notice.
1. Controller and roles
For account and service-use data, the service operator acts as controller. For personal data entered by a customer organisation, that organisation normally acts as controller and the operator processes the data on its documented instructions.
2. Personal data processed
We process account and contact details, billing information, support communications, data entered by authorised users, and limited technical information necessary to operate and secure the service.
3. Purposes and proposed legal bases
We use data to provide and secure the service, manage accounts and billing, respond to requests, comply with legal obligations and, where applicable, manage optional integrations. The applicable legal basis depends on the context and is described in the relevant contract or notice.
4. Customer-controlled business data
Customer administrators choose users, permissions, records, files, integrations and operational data placed in their tenant. They must have a valid basis and give required notices to employees, customers, suppliers and other individuals represented in that data.
BeWynd Flow must process tenant data only to provide, secure, support and maintain the contracted service, subject to the final contract and Data Processing Agreement.
5. Recipients and service providers
Data may be shared only as needed with service providers for hosting, communications, payments, storage, or optional integrations, and with authorised users or authorities where required by law.
With your Analytics consent, we use Google Analytics 4 to measure public page visits and technical navigation information. This integration does not send email addresses or the contents of form fields to Google Analytics. You can withdraw consent through Cookie settings in the footer.
6. International transfers
Where data is transferred outside the European Economic Area, the applicable safeguards required by law will be used.
7. Retention and deletion
Personal data are retained only for as long as necessary for the purposes described or to meet legal obligations, then deleted or anonymised in line with the applicable retention rules.
8. Security
We use appropriate technical and organisational measures to protect personal data. Users must also protect their credentials and manage access to their accounts.
9. Your rights
Subject to applicable law and the controller/processor role, individuals may request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent without affecting earlier processing. A request may require proportionate identity verification.
For data entered by an employer, customer or other BeWynd Flow organisation, contact that organisation first. BeWynd Flow will support the customer where it acts as processor.
You may also complain to the competent supervisory authority. In Portugal, guidance and complaint channels are available from the CNPD. CNPD data protection rights
10. Contact, complaints and changes
For privacy questions or to exercise your rights, contact us at [email protected].