DPA-2026-0001
Data Processing Addendum
This addendum applies where Mindful Message or FoxTech processes personal data for the organisation as processor or subprocessor. It does not change Mindful Message-controlled counselling and case records unless a separate written agreement says otherwise.
Effective 2026-05-29. Review by 2026-08-29.
Processing Scope
Processing covers platform access, referral administration, appointment coordination, assessment and feedback links, invoices, support, security, and compliance operations for the agreed service term plus retention, legal hold, audit, and backup deletion cycles.
Data And Subjects
Data subjects may include customer users, referred service users, counsellors, customer contacts, and billing contacts. Data categories include identity, contact, organisation, referral administration, appointment metadata, audit, support, and limited service records needed for the contracted workflow.
Processor Duties
Mindful Message and FoxTech process customer-controlled data only on documented instructions, bind personnel to confidentiality, maintain appropriate security measures, use vetted subprocessors, assist with rights and breach duties, and return or delete data at the end of service unless retention or legal duties require restriction.
Transfers And Subprocessors
International transfers and subprocessors are documented before UK personal data is sent to, hosted by, or remotely accessed from outside the UK.