---
title: "GDPR Compliance - Batimo"
url: https://batimo.ai/gdpr-compliance/
language: en-US
---

# GDPR Compliance

## **1. Data Controller**

For the purposes of the General Data Protection Regulation (GDPR), BaTimo acts as a Data Controller for account and billing data, and as a Data Processor for customer message data processed on behalf of business users.

## **2. Legal Basis for Processing**

We process personal data under the following legal bases:

- Performance of a contract (to provide our services).
- Legitimate interests (platform security, service improvement).
- Legal obligations (compliance with UK and EU laws).
- Consent (for marketing communications or optional cookies).

## **3. Your GDPR Rights**

If you are located in the European Economic Area (EEA), you have the right to:

- Access your personal data.
- Rectify inaccurate data.
- Request erasure (“right to be forgotten”).
- Restrict or object to processing.
- Request data portability.
- Withdraw consent at any time.

Requests can be submitted via: support@batimo.ai

## **4. Data Retention**

We retain personal data only for as long as necessary to fulfill contractual and legal obligations, unless a longer retention period is required by law.

## **5. International Data Transfers**

Where personal data is transferred outside the United Kingdom or European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent legal mechanisms.

## **6. Data Security**

We implement technical and organizational measures to protect personal data, including encryption, access controls, and regular security reviews.

## **7. Data Processing Agreement (DPA)**

Business users who require a Data Processing Agreement may request one by contacting support@batimo.ai.