Data Processing Agreement
For professional and organisational customers.
Evenli Ltd (company number 17064042, registered in England and Wales) ("Evenli", "we") provides a communication facilitation platform to families in the UK. For professional accounts (legal experts, mediators, social workers and other professionals working with families) and any organisations who sponsor families on Evenli, this Data Processing Agreement ("DPA") supplements our Terms & Conditions and Privacy Policy.
Roles
Each family on Evenli is the controller of its own family data. Evenli is the processor for that data, acting on documented instructions from the family via the platform. Where a professional or organisation is granted permission-based, read-only access by a family, the professional acts as a separate controller for the purposes for which they use the data (for example, mediation or legal proceedings).
Subject matter and duration
Subject matter: provision of the Evenli platform. Duration: for as long as the family or professional account remains active, and until data is deleted in line with our retention policy (messages auto-delete 28 days after sending; account deletion removes personal data subject to legal obligations).
Nature, purpose and categories
We process the personal data your family or organisation enters into Evenli (account details, messages, calendar entries, expenses, canvas notes and call metadata) for the purpose of operating the service. We may process special category data only to the extent that families voluntarily include it in their messages or notes.
Sub-processors
We use a small set of vetted sub-processors (cloud hosting, email delivery, payments via Stripe, AI scoring via OpenAI, and analytics). A current list and contracts referencing the EU/UK Standard Contractual Clauses where relevant are available on request to info@evenli.co.uk.
Security
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, audit logging and least-privilege staff access. For more detail see our Security overview.
Data subject rights and assistance
We will assist controllers with responding to data subject requests where it is technically feasible for us to do so. Families can directly export and delete their own data from within Evenli at any time.
Contact
For a signed copy of this DPA on your headed paper, or to request our sub-processor list, contact info@evenli.co.uk.