Data Processing Agreement

Slot Flow Ltd (“Slot Flow”, “we”, “our”, or “us”) is committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws.

This policy explains how we collect, process, store, and protect personal data when providing our WhatsApp Business API messaging and marketing automation services.


1. Company Information


Company Name: Slot Flow Ltd

Registered Country: United Kingdom

Slot Flow Ltd provides a cloud-based platform that enables businesses to send messages, automate conversations, and manage customer interactions using the WhatsApp Business API.


2. Roles Under GDPR


Under data protection laws, Slot Flow Ltd may act as:

Data Processor

When we process customer data on behalf of our clients using our platform.

Data Controller

When we collect and process data related to:

  1. Account registration
  2. Billing information
  3. Website usage

Our customers are responsible for ensuring they have proper consent from their end users before sending messages through our platform.


3. Types of Personal Data Processed


Slot Flow Ltd may process the following categories of personal data:

Account Information

  1. Name
  2. Email address
  3. Phone number
  4. Company name
  5. Billing details

Messaging Data

  1. Customer phone numbers
  2. Message content
  3. Chatbot interactions
  4. Conversation logs

Technical Data

  1. IP address
  2. Browser type
  3. Device information
  4. Platform usage data

4. Purpose of Data Processing


We process personal data only when necessary for the following purposes:

  1. Providing WhatsApp messaging services
  2. Managing user accounts
  3. Processing payments
  4. Improving platform functionality
  5. Providing technical support
  6. Ensuring security and fraud prevention
  7. Complying with legal obligations

5. Legal Basis for Processing


Under UK GDPR, we process personal data based on the following lawful grounds:

  1. Contractual necessity (to provide services)
  2. Legitimate interests (to improve platform performance)
  3. Legal obligations (to comply with applicable laws)
  4. User consent where required

6. Data Sharing


Slot Flow Ltd may share personal data with trusted third parties including:

  1. Cloud hosting providers
  2. Payment processors
  3. Technology partners
  4. WhatsApp Business API provider (Meta Platforms Inc.)

These partners process data only for the purposes necessary to provide services.


7. International Data Transfers


Some data may be transferred outside the United Kingdom or European Economic Area.

When this occurs, we ensure appropriate safeguards are implemented, such as:

  1. Standard Contractual Clauses (SCC)
  2. Secure data processing agreements

8. Data Retention


We retain personal data only for as long as necessary to:

  1. Provide services
  2. Fulfill contractual obligations
  3. Comply with legal requirements
  4. Resolve disputes

Users may request deletion of their data where legally permitted.


9. Data Security


Slot Flow Ltd implements appropriate technical and organizational measures to protect personal data, including:

  1. Data encryption
  2. Secure servers
  3. Access control systems
  4. Monitoring and security protocols

Despite these measures, no system can guarantee absolute security.


10. Data Subject Rights


Under UK GDPR, individuals have the right to:

  1. Access their personal data
  2. Correct inaccurate data
  3. Request deletion of personal data
  4. Restrict processing
  5. Object to data processing
  6. Request data portability

Requests related to personal data may be submitted using the contact information below.


11. Data Breach Notification


In the event of a data breach that may affect personal data, Slot Flow Ltd will:

  1. Investigate the incident promptly
  2. Notify affected parties when required
  3. Report breaches to relevant authorities if legally required

12. Third-Party Services


Our platform integrates with third-party services including WhatsApp Business API (Meta).

Use of these services is subject to the respective provider’s privacy and data protection policies

.

13. Updates to This Policy


Slot Flow Ltd may update this GDPR policy from time to time to reflect legal or operational changes.

Updates will be published on our website with a revised effective date.


14. Contact Information


If you have questions about this GDPR policy or your data rights, please contact:

Slot Flow Ltd

United Kingdom

Email: support@slotflow.com