Terms, privacy and your data processing agreement
The four documents between Divvent and your company, where to read them, what your company accepts, and what happens when one changes.
Divvent publishes four documents. Your company accepts two of them when it signs up, and you can read all four at any time, signed in or not.
The four documents
| Document | What it is | What it asks of your company |
|---|---|---|
| Terms of service | The agreement between Divvent and your company. | Accepted by an owner |
| Data processing agreement | How Divvent handles personal data in your applications on your company's behalf, under UK GDPR Article 28. | Accepted by an owner |
| Privacy policy | The personal data Divvent itself holds about the people who use the portal, and their rights. | Read, and said so |
| Sub-processors | Every company Divvent uses that can handle your customers' personal data, what for, and where. | Published for you to see |
Each document has a version number and the day it took effect, shown at the top of its page.
Read them
- On the website: divvent.co.uk/legal, and the links at the foot of every page.
- In the portal: app.divvent.co.uk/legal. You can open it whether or not you're signed in.
- On the portal's Trust page, at app.divvent.co.uk/trust, once you're signed in.
What your company agrees to at sign-up
When you set up your company, the page where you choose your password has a box under Agreement. Ticking it says that, on your company's behalf, you accept the terms of service and the data processing agreement, and that you have read the privacy policy. Nothing is made until it is ticked. See Sign up and your free trial.
The page remembers which versions it showed you. If a document changes while the page is open, you're asked to read the new one and accept it again, so you're never recorded as accepting a version you didn't see.
The Trust page
The portal's Trust page shows everyone in your company:
- Where your data lives: the place your company chose when it was created, and what that choice promises.
- Documents: each document, its current version, the day it took effect, and what it asks of you.
- What your company has accepted: who accepted which version, when, and whether it was at sign-up or in the portal.
- Who processes your data for Divvent: each sub-processor, what for, and where.
- Security: where to report a security problem you've found (security@divvent.co.uk).
When a document changes
A change that affects a right, a duty, a price, a purpose, or who handles your data is a material change. For one of those:
- Divvent publishes the new version at least thirty days before it takes effect, and a line across every page of the portal says when it will change, with See what changes.
- Until then, an owner can read it on Trust and accept it early.
- From the day it takes effect, until an owner accepts, your company is read-only. Your applications keep running and everybody can still see everything, but nothing can be changed. An owner who signs in is taken straight to Trust, where they tick the box and press Accept. Everyone else sees a line saying an owner needs to accept.
A change that isn't material takes effect when it's published.
Only an owner can accept, because accepting agrees to a contract on the company's behalf. Every acceptance is recorded with who accepted, for which company, which version, and when.
If your company has no acceptance on record (for example, because Divvent set it up for you), an owner is taken to Trust and asked to accept. The company isn't made read-only for that.
New sub-processors
Divvent tells you at least thirty days before adding or replacing a sub-processor, by publishing a new version of the list. Under the data processing agreement, you may object on reasonable data-protection grounds in that time. If we can't resolve it, you may end the agreement without penalty.
Questions
For anything about your personal data or these documents, write to privacy@divvent.co.uk or legal@divvent.co.uk. See also Security, and what Divvent can and can't see and The AI and your data.