Draft — pending legal review. Our lawyer has not reviewed this document yet, and it may change before MyDomainsHub Mail opens. Questions: hello@mydomainshub.com.
The parties and their roles
You, the account holder, are the data controller for the personal data in the emails you send. CLOOP UNIVERSE TECH LTD (RC 9771867), trading as MyDomainsHub, is your data processor.
What we process, and why
- Purpose: sending the emails you ask us to send, reporting what happened to them, and keeping your suppression list.
- People: your recipients, and anyone named in an email’s addresses.
- Data: email addresses and names in them; each email’s subject, tags, body and attachments, and whatever personal data you put in them; delivery events.
- Duration: for as long as your account is open, then as set out under “Deletion”.
Your instructions
We process this data only to provide the service — that is, on the instructions you give through the API and your account — or where the law requires us to, in which case we tell you unless the law forbids it. You are responsible for having a lawful basis, and your recipients’ consent where it is needed, for every email you send.
Security
- Everything travels over encrypted connections.
- Each account’s data is kept apart by row-level security in our database: a member of one account cannot read another’s.
- API keys are stored only as hashes.
- Only the mail worker holds the credentials that can send email; our website and API cannot send.
- Recipient addresses, subjects and message bodies are never written to our logs.
Sub-processors
You authorise the sub-processors on our sub-processors page. We bind each to data protection terms no weaker than these. Before we add or replace one that receives your recipients’ data, we will update that page and email account owners, and you may object by closing your account before the change takes effect.
Helping you meet your obligations
- We pass on any request from a recipient about their data, and help you answer it.
- If we become aware of a breach affecting your recipients’ data, we tell you without undue delay, with what we know, so you can meet your own duty to notify.
- We give you the information you reasonably need to show you meet the Act.
Deletion
- Message bodies and attachments are deleted 72 hours after an email leaves the queue.
- The email log is deleted at the end of your plan’s log retention.
- When your account closes, we delete what remains of your recipients’ data, except what the law requires us to keep.
Transfers outside Nigeria
Your recipients’ data is processed in the United Kingdom (Amazon SES’s London region and our database) and passes through servers in the United States (our hosting). We rely on our sub-processors’ data protection terms for these transfers.
Contact
Email hello@mydomainshub.com.