Last updated March 2026.

Data Processing Agreement

This agreement is between Vomni (the data processor) and your business (the data controller).

What this agreement covers

Vomni processes personal data - specifically customer names and phone numbers - on your behalf. The sole purpose is to send automated feedback request text messages after customer appointments.

What data is processed

• Customer first names and phone numbers received from your booking confirmation emails
• Customer responses to feedback requests
• Timestamps of messages sent and received

How long this agreement lasts

This agreement remains in force for the duration of your Vomni subscription.

Vomni's responsibilities

• We process personal data only for the purpose described above
• All staff with access to personal data are bound by confidentiality
• We implement appropriate technical and security measures to protect data
• We will notify you without delay of any data breach affecting your customers
• We will assist you in responding to any data subject rights request
• We will delete or return all personal data when you close your account
• Our current sub-processors are Twilio (SMS delivery) and Supabase (data storage)

Your responsibilities

• Ensure you have a lawful basis for sharing customer contact data with Vomni
• Inform customers they may receive a feedback text after their appointment. Suggested wording: "After your visit you may receive a short text message asking for feedback on your experience. Reply STOP at any time to opt out."
• Notify Vomni immediately at hello@vomni.io if any customer asks to have their data deleted
• Update your privacy policy to mention Vomni as a data processor
• Only share data for genuine customers who have had a real appointment

Where data is stored

Customer data is stored on servers within the European Economic Area or in countries recognised by the UK Information Commissioner's Office as providing adequate data protection.

Governing law

This agreement is governed by the laws of England and Wales and is subject to UK GDPR and the Data Protection Act 2018.

Contact

hello@vomni.io