Legal
Data processing changes
Last updated: 29 October 2026
This is the dated record of changes to our standard Master Services Agreement, to the Data Processing Agreement at its Appendix A, to the sub-processor list and to the kiosk section of our privacy policy. Your signed agreement is the one that binds. This page tells you what has changed in the standard since the day you signed, so you can see what is new.
Optional features are off as delivered and are switched on by you, in your own settings. The data each one processes is described beside the control that enables it, and here. Turning a feature on is your decision as the data controller, and nothing starts being processed because it appears on this page.
A new or replaced sub-processor is never only published here. It goes to every client in writing with thirty days’ notice and a right to object, as the Data Processing Agreement requires. This page is the record; the email is the notice.
Find the date you signed. Everything above it came later. Questions to [email protected].
Changes
| Date | Change | Where |
|---|---|---|
| 29 October 2026 | Evacuation assistance question. Where a client turns it on at a site, the visitor form asks “I would need help to leave the building in an emergency”, a yes or no with no reason asked for, shown beside the name on the roll call and kept in any fire drill record taken during the visit. Off as delivered. | DPA, Appendix A, clause 2.5; privacy policy section 10 |
| 21 October 2026 | Aggregated statistics. Noon Elite may derive statistics combined across all clients from which no client, site or person can be identified, with a right for the client to opt out by written notice. | MSA clause 9.2 |
| 18 October 2026 | Fire drill records. A roll call frozen at the alarm, who was accounted for and when, a staff count and the person in charge, kept three years unless the client sets another period, with the visitor and contractor names removed when the client’s visitor record period passes. | DPA, Appendix A, clause 9.7; Schedule 1 |
| 18 October 2026 | Backblaze B2 (Backblaze, Inc.) added as a sub-processor, holding a second copy of the documents a contractor’s office uploads through the Permit to Work module, in the Netherlands. No visitor, delivery, staff or fire drill records and no photographs. | DPA, Appendix A, clauses 5.2 and 6.2 |
| 18 October 2026 | Resend’s purpose widened from Permit to Work messages to include arrival notifications to a host’s email address where the client enables them. | DPA, Appendix A, clauses 5.2 and 6.3 |
| 23 August 2026 | The mobile device management platform used to administer the kiosk hardware is stated not to be a sub-processor: it holds device inventory for Noon Elite’s own equipment and has no access to personal data held in the kiosk application. | DPA, Appendix A, clause 5.8 |
| 22 August 2026 | Agreement terms updated for hardware provision, payment and liability, and the legal pages on this site generated from one source document. | MSA |
The security measures behind the agreement are described on the security page. Changes to the public terms for this website are shown by the date at the top of the terms and conditions.