Data Protection

Platform operator and privacy contact

Mars AI Technology Solutions Limited, registered in England and Wales under company number 14863498. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.

Use [email protected] for privacy requests, processor-contract enquiries and questions about a specific HelloTap account. Identify the relevant workspace and the type of assistance required. We do not designate a statutory data protection officer or certification by publishing this contact.

When we are controller

We determine the purposes of account administration, platform security, our billing records and support communications. Our Privacy Policy covers those activities, their legal bases, recipients, retention considerations and individuals’ rights.

When a customer is controller

You normally determine the purpose and content of your public card, the visitor information you request and how you use enquiries or appointment data. You must establish a lawful basis, give an appropriate notice, keep information accurate and respond to the rights that apply. Do not upload sensitive, regulated or unnecessary personal information just because an editable field is available.

Processing agreement for business customers

Before using HelloTap to process personal information on your organisation’s behalf, contact us for the current data processing agreement and the applicable service schedule. The agreement should identify the parties, processing purpose and duration, data categories, affected individuals, instructions and security requirements.

It must address confidentiality, appropriate security, assistance with rights and relevant impact assessments, incident cooperation, authorised subprocessors, international transfers, deletion or return of information, and proportionate audit information. This explanatory page is not presented as a signed, customer-specific DPA or as evidence that a provider contract has already been completed.

Service providers and transfers

Network delivery and security use Cloudflare. Hosting, storage, backup, email and payment services depend on the operational service and enabled integrations. Request the current named subprocessor information, processing locations and applicable transfer safeguards before your organisation approves the service for a regulated use. We do not imply an EU-only location guarantee or a completed transfer assessment merely by linking a provider.

Access, correction, export and deletion

Manage ordinary account and card information through the available dashboard controls. For a rights request or information that cannot be managed there, contact [email protected]. Identify the account and information concerned and avoid sending identity documents unless a proportionate verification step is specifically requested.

If a visitor’s information belongs to your business relationship, you should handle the request as controller and ask us for necessary processor assistance. Account closure, plan cancellation and deletion are distinct operations; explain which result is needed. We may have to retain limited records for a legal duty or legal claim.

Incidents and responsible use

Report suspected compromise promptly with the affected URL, approximate time and a safe description of the issue. Do not disclose a password or another person’s sensitive data in an ordinary report. We investigate issues and cooperate with affected customers on legally required notifications. Account holders remain responsible for their own notices, lawful collection and customer communications.