Data processing terms

Last updated 9 October 2026

These terms form part of our terms of service and apply when CushyCal is operated by Everburn Studio Ltd, a company registered in England and Wales (company number 17511259), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ (“processor”) processes personal data of your clients on your behalf (you are the “controller”).

1. Scope

Subject matter: scheduling, reminders and payments for your bookings. Data: clients' names, emails, phone numbers, time zones, booking details, form answers and payment status. Duration: while your account exists, then deletion as described in our privacy policy.

2. Our commitments

• We process client data only on your documented instructions — the way you configure and use CushyCal — unless the law requires otherwise.
• Everyone with access is bound by confidentiality. Support access to your account is logged and you're notified.
• We maintain appropriate security measures: encryption in transit, encrypted credentials at rest, access controls, audit logs and daily backups.
• We help you answer clients' requests to access, correct or delete their data, and with security and impact assessments where relevant.
• We notify you without undue delay, and within 72 hours where possible, after becoming aware of a personal data breach affecting your data.
• On termination we delete client data as described in our privacy policy, except where the law requires us to keep it.
• We make available the information needed to show compliance with these terms.

3. Sub-processors

You authorise these sub-processors. We'll give 14 days' notice of new ones by email, and you may object by closing your account.

4. International transfers

Where client data leaves the country it was collected in, we rely on appropriate safeguards such as standard contractual clauses.

5. Contact

Privacy questions and requests: privacy@cushycal.com.