# 4.2 Short data processing terms for Business customers

Offer these on request, or include them in the agreement.

• We process customers’ personal data only to provide the Service and on the Business’s documented instructions.

• Everyone with access is bound by confidentiality.

• We keep reasonable security measures, as described in the Privacy Policy.

• We use the providers listed in section 4.1 and will give notice of changes.

• We help the Business answer rights requests from its customers.

• We tell the Business about a breach affecting its data without undue delay.

• At the end of the agreement we delete or return the data, subject to backups described in the Privacy Policy.

• The Business is responsible for having a lawful basis and giving notice to its customers.