GDPR & Data Processing

1. Our Commitment

Milar, a product of Nexent, is committed to compliance with the EU General Data Protection Regulation (GDPR) and the UK GDPR. This page explains how we handle personal data and how you can exercise your rights.

2. Controller and Processor Roles

When you manage your account and marketing data, you act as the data controller and Milar acts as a data processor that processes personal data on your instructions. For our own website visitors and account holders, Milar acts as the data controller.

3. Legal Bases for Processing

• Performance of a contract (providing the services you request)
• Legitimate interests (securing and improving our platform)
• Consent (e.g., non-essential cookies and certain communications)
• Compliance with legal obligations

4. Your Rights

Subject to applicable law, you have the right to:

• Access, rectify, or erase your personal data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, email privacy@milar.io. See our Privacy Policy for further detail.

5. Data Processing Addendum (DPA)

For customers who require a Data Processing Addendum, our DPA, which incorporates the EU Standard Contractual Clauses where applicable , forms part of our Terms of Service. To request a signed copy, contact privacy@milar.io.

6. International Data Transfers

Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards such as the Standard Contractual Clauses and additional technical and organizational measures.

7. Subprocessors

We use vetted third parties to deliver our services. A current list is available on our Subprocessors page.

8. Contact & Data Protection

For data protection inquiries, contact our team at: privacy@milar.io