Data Processing Agreement

You (the business) decide why and how your customers' details are used, so you are the controller. BRONI&BO LTD, trading as Orvia Hub, processes them only to provide the service and only on your instructions, so we are the processor.

• Subject matter: providing your website, enquiry handling, customer records, jobs, quotes and invoices, and any messaging features you switch on.
• Duration: while your account is open, plus the short retention described in clause 7.
• Categories of people: your enquirers, customers, tenants or landlords, and your own team members.
• Categories of data: names, addresses, phone numbers, email addresses, job details and photos, message, call and voicemail records, quote, booking and payment records, and marketing permission records.
• No special category data is required by Orvia. Please don't put health or other sensitive details into free-text fields.

• We process personal data only on your documented instructions, which include using the features in the product as intended.
• We keep it confidential and make sure our staff and suppliers are bound to do the same.
• We help you respond to requests from your customers — access, correction, deletion, objection — and pass on anything sent to us by mistake.
• We tell you without undue delay if there is a personal data breach affecting your data, with the detail you need to meet your own reporting duties.
• We help you with data protection impact assessments and audits, on reasonable request.

• Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting and database providers.
• Access to your account data is restricted by row-level database rules so one business can never read another's records.
• Passwords are stored only as salted hashes; card details never reach our systems.
• Administrative access by our team is limited to what is needed for support and is authenticated.
• Backups are held by our database provider with point-in-time recovery.

You give us general authorisation to use the sub-processors below. We'll give you reasonable notice before adding or replacing one, and you may object on reasonable data protection grounds.

• Lovable (hosting and application platform)Hosting, build and delivery of the Orvia application and business websites
• SupabaseDatabase, authentication, file storage and server functions
• CloudflareEdge delivery and running the application's server code
• StripeSubscription billing and payment processing
• TwilioPhone numbers, calls, voicemail and text messaging where a business has bought them
• Google (Maps Platform)Maps and postcode lookups shown on job records
• Google (Gemini via the Lovable AI gateway)AI call handling and content drafting where enabled
• Name.comDomain registration and renewal where a business buys a web address
• Meta (Facebook / WhatsApp)Social posting and click-to-chat where a business connects it

Where a sub-processor handles data outside the UK, the transfer is covered by an adequacy decision or by standard contractual clauses with the UK addendum.

• You can export your customer and enquiry records at any time from your account.
• When you delete a record it is removed from your account immediately and purged from backups in line with our provider's backup cycle (normally within 30 days).
• When you delete your account we delete the data we hold for you, except records we must keep by law and marketing suppression records, which are kept so nobody is contacted again by mistake.

The retention and suppression choices above are deliberate but should be confirmed with a solicitor for your own circumstances.

Orvia records the exact wording, channel, date and source of every marketing permission your customers give, and excludes anyone without permission from marketing sends. That helps you show compliance, but the decision to market, and responsibility for it, remains yours.

Data protection queries: privacy@orviahub.app.