Last updated 29 October 2026
This addendum applies when a published site collects an enquiry on behalf of a Client.
The Client is the controller of the enquiry data. OneMoreSend is the processor. The Client decides why the data is collected and what happens to it; we store it and make it available to the Client, and send a notification if the Client has configured one.
The Client’s own business information (legal name, EIN, address, documents, and site content) is controller data covered by the Privacy Policy, not by this addendum.
We process the fields the published form collects: first and last name, phone, email, selected service, message, SMS consent choice, the exact consent label shown, consent timestamp, page URL, IP address, and browser user agent.
We process it to receive the enquiry, store it, make it available to the Client, notify the Client, and keep a record of consent. We do not use it for our own marketing and do not sell it.
We will tell the Client before adding a subprocessor that handles enquiry data.
Data is encrypted in transit and at rest. Access is limited to the people who need it. Each Client’s records are separated in the database. We keep audit and access logs.
If we become aware of a breach affecting enquiry data, we will notify the Client without undue delay and give the information the Client needs to meet its own notification duties.
The Client can export enquiries from the Site Builder. On request, we delete a Client’s enquiry data within 30 days, except where a legal hold applies. When the account closes, we keep the data for 30 days so the Client can retrieve it, then delete it.
We will answer reasonable questions about our processing and provide the information a Client needs for its own records. Contact privacy@onemoresend.com.