Data processing terms

Last updated 16 October 2026

These terms are the data processing agreement required by Article 28 of the UK GDPR and the EU GDPR. They form part of our Terms of service.

Parties: the business using JobSense (the controller) and AXIS WORKPLACE TECHNOLOGY LTD, a company registered in England and Wales (company number 16374487), whose registered office is at 450 London Road, Portsmouth, England, PO2 9LD (the processor).

What we process

PurposeProviding JobSense: managing jobs and scheduling; photos, videos and documents; checklists, certificates and signatures; reports, quotes and invoices; customer requests, payments and messages
Kinds of personal dataNames, phone numbers, email and postal addresses, job notes, photos and videos (which may show people or property), signatures, payment status and message history
Whose dataThe controller's customers and their contacts, and the controller's staff
How longWhile the controller uses JobSense, then deleted within 30 days of the workspace closing (backups roll off within a further 35 days)

What we promise

  1. We'll only process the data on the controller's documented instructions (using JobSense as designed), unless the law requires otherwise, in which case we'll tell the controller if we're allowed to.
  2. Everyone who can access the data is bound to keep it confidential.
  3. We keep it secure, including: encryption in transit; a private, encrypted file store; a separate database for each business; encrypted storage of connected-account passwords and tokens; access limited to authorised people; and logged, time-limited support access.
  4. We only use the sub-processors listed in our Privacy policy, under contracts with equivalent protections. We'll give at least 30 days' notice of a new sub-processor, so the controller can object.
  5. We'll help the controller respond to people using their data protection rights, for example with the in-app tools to edit, export or delete customers.
  6. We'll tell the controller without undue delay, and within 48 hours of becoming aware, of any personal data breach affecting its data, and help it meet its obligations.
  7. At the end of the service, we'll delete or return the data, as the controller chooses.
  8. We'll provide the information needed to show we comply with these terms, and allow reasonable audits.

International transfers

Where a sub-processor processes data outside the UK or EU (for example Twilio for texts), transfers are covered by an adequacy decision, the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses.

The controller's part

The controller is responsible for having a lawful basis to collect its customers' data, telling them how it's used, and only sending messages to people who've agreed to receive them.

Questions: hello@axis-it.co.uk.