Data Processing Agreement

This agreement is between your business and Speur Professional Services Limited (“Speur”, “we”, “us”), 55 Old Hope Road, Kingston 6, Jamaica. It covers the personal information we handle for you when you use KrisBiz (Front Desk, PayUp and Payroll Lite). You accept it when you accept our Terms of Service, and it forms part of them. It is made in writing so that both of us meet Jamaica’s Data Protection Act, 2020.

Your business is the data controller. You decide why and how your customers’ and workers’ information is used.

Speur is the data processor. We handle that information only to provide KrisBiz to you, and only on your instructions. Your instructions are your settings and what you do in KrisBiz, and anything else you ask us in writing.

If we think an instruction breaks the law, we will tell you and not act on it.

You are responsible for having a lawful reason to collect the information and for getting any permissions you need, including your customers’ permission to receive WhatsApp messages.

Customer chats: WhatsApp messages and voice notes with your customers, and transcripts of voice notes, so the assistant can answer and hand chats to you.

Bookings: customer names, phone numbers and appointments, so we can book, remind and keep your schedule.

Invoices and payment records: customer names, invoice amounts and status (not card numbers), so we can send reminders and keep your records.

Payroll Lite only: your workers’ names, pay inputs, hours, location check-ins and the details needed for payslips and statutory filings.

Your business details and staff logins, so you and your staff can use KrisBiz.

We do not use this information for our own purposes, sell it, or use it to target ads.

Only people at Speur who need access to support or run KrisBiz can see your information. They must keep it confidential and follow our security rules.

Encryption in transit, and encryption of sensitive items such as each business’s WhatsApp access token.

Each business’s data is kept separate, so one business cannot see another’s.

Access controls and logins for every person, two-step sign-in for Speur admins, and a record of admin actions.

Regular backups, so data can be restored after a technical problem, and regular checks of these measures.

We use a small number of outside providers to run KrisBiz, such as Meta (WhatsApp), hosting, AI, email and card payment providers. They may use the information only to provide their service to us, under terms that protect it at least as well as this agreement. Our current list is on our providers page (/providers). We will update that page before we add or change a provider that handles your information, and you can tell us if you object. If you object, you may cancel KrisBiz without penalty.

Some providers, including our hosting and AI providers, are in the United States, so your information may be processed outside Jamaica. We only use providers that give adequate protection for the information, in line with the Data Protection Act, 2020.

If we become aware of a security breach that affects or may affect your information, we will tell you without undue delay and within 24 hours of becoming aware of it. We will tell you what happened, what information and how many people may be affected, and what we are doing about it, so you can report it to the Information Commissioner within the 72 hours the Act allows.

If someone asks to see, correct or delete their information, we will help you respond. If the request comes to us, we will pass it to you or act on your instructions, and we will reply within 3 business days.

While you use KrisBiz, you can download your data at any time from your dashboard as Excel or CSV. When you cancel, the service continues until the end of your paid period. Your data is then read-only for 60 days, so you can view and download it, and then archived. Archived data is permanently deleted two years after it is archived, unless the law requires us to keep it longer.

On request, we will give you the information you reasonably need to show that this agreement is being followed, and we will answer reasonable questions from you or the Information Commissioner about how we handle your information.

Speur Professional Services Limited, 55 Old Hope Road, Kingston 6, Jamaica. Email: support@krisbiz.com. Phone: 876-448-1239.