Data processing terms

When it applies

When you use WordNext to collect or manage YOUR users' data (contact, subscription or booking forms, sales and course students), you are the data CONTROLLER and WordNext acts as PROCESSOR on your behalf. These terms govern that processing under Article 28 GDPR and form part of your relationship with WordNext; by using these features you accept them.

Subject matter, duration, nature and purpose

Subject matter: hosting and processing the data your users provide through your site. Duration: for as long as you use the service. Nature and purpose: providing the platform features you enable (forms, email marketing, sales and courses).

Data and data subjects

Categories of data: identifying and contact data (name, email, phone), the content of messages and, where applicable, purchase data. Categories of data subjects: your site's users, customers or subscribers.

WordNext's obligations as processor

WordNext undertakes to:

• Process the data only on your instructions and to provide you the service.
• Keep confidentiality and require it from anyone accessing the data.
• Apply appropriate security measures.
• Help you handle data subjects' rights and your security and breach-notification obligations.
• Delete or return the data at the end of the processing, unless legally required to keep it.

Sub-processors

You authorise us to rely on the following sub-processors, with the safeguards of Article 28 GDPR. We will inform you of changes so you can object:

• Vercel — hosting, CDN and media storage.
• Neon — database.
• Brevo — email delivery (notices and newsletters).
• Cloudflare — anti-fraud protection (Turnstile).
• Stripe — payment processing for your sales.

Audit

We will make available the information needed to demonstrate compliance with these obligations.