Legal
Data Processing Addendum
Effective: July 13, 2026
1. Scope and roles
This Addendum applies when a business customer uses AlwaysOnTime to store or send reminders to recipients. The customer is controller of recipient data and Talistech BV, trading as AlwaysOnTime, is processor. Talistech remains an independent controller for account administration, billing, security, service management and abuse prevention.
2. Processing instructions
Talistech processes data only to provide, secure and support the service, including scheduling, queuing, sending and reporting reminders. Talistech does not sell recipient data, use it for advertising or combine WhatsApp data with unrelated datasets.
3. Data and people
Data may include names, email addresses, telephone numbers, messaging identifiers, reminder content, dates, time zones, opt-in records, opt-out records and delivery metadata. People may include the customer’s staff, contacts, recipients and service users.
4. Customer responsibilities
The customer must have a lawful basis, provide required privacy information, obtain valid channel opt-ins, honour objections and opt-outs, use accurate data and avoid special-category or high-risk data unless separately justified.
5. Security and assistance
Talistech operates the AlwaysOnTime hosting and email infrastructure and applies access controls, authentication, rate limiting, encrypted transport, secret protection, audit logging and least-privilege access. Talistech assists with data-subject requests, incidents, deletion, export and reasonable compliance information.
6. External subprocessors and transfers
Talistech’s own hosting and email infrastructure is operated by Talistech BV. External providers may include Meta/WhatsApp, Mollie and optional Google Analytics. These providers receive only the data required for their service and are governed by applicable contractual and transfer safeguards.
7. Incidents and deletion
Talistech will notify the customer without undue delay after confirming a personal-data incident affecting customer data. At the end of the service, Talistech deletes or returns customer data unless retention is required by law.
8. Contact
Questions can be sent to hello@alwaysontime.io. This Addendum forms part of the customer’s agreement with Talistech BV and does not reduce any mandatory GDPR obligation.