Data Processing Addendum

This page explains the data-protection roles between you, your prospects, and No Stress Agents (operated by Envo Technologies Ltd). If your procurement process needs a formally signed DPA rather than this explainer, email hello@nostressagents.comand we’ll send one over.

Two roles, not one

The controller/processor relationship depends on which data we’re talking about:

• Your account data. For the information you give us directly (company details, target market, sending domain), you are the controller and we act as a processor, handling it only to provide the service and on your instructions.
• Prospect contact data.For the business contacts we find, verify, and research on your behalf, we act jointly with you: we determine how the data is sourced and verified, and you determine who is targeted and what’s sent. Both of us have obligations to that prospect, which is why the legal basis and opt-out mechanics in our Privacy Policy apply regardless of which of us they were originally sourced by.

Sub-processors

We use third-party providers for B2B contact enrichment and verification, and for email-sending and delivery infrastructure. Each is engaged under its own data-processing terms and processes data only to the extent needed for that specific function. A full, current sub-processor list is available on request.

Security

Access to prospect and account data is restricted to what’s needed to run your campaign. We don’t publish a specific compliance certification on this page because we don’t hold one yet: if that’s a requirement for your procurement process, tell us directly and we’ll work through what’s needed.

Data subject requests

If a prospect contacts us directly to access, correct, or delete their data, or to opt out, we action that request and notify you where relevant. If one is sent to you instead, forward it to hello@nostressagents.com and we’ll help you resolve it.

International transfers

Where our sub-processors handle data outside the country it was collected in, including outside the EEA, we rely on the transfer mechanisms those providers make available (such as Standard Contractual Clauses).