Data Security & GDPR Compliance

Is Thynk GDPR compliant?

Yes. Thynk acts as a Data Processor under GDPR. All customer data is hosted on Salesforce within EU data centres, with encryption, access controls, and audit trails in place.

We understand that hospitality businesses handle sensitive guest information daily. Our GDPR compliance framework ensures that personal data is processed lawfully, transparently, and securely, with full respect for data subject rights including access, rectification, erasure, and portability.

Where is Thynk customer data stored?

All data processed by Thynk is stored securely on the Salesforce platform, using AES-256 encryption at rest and TLS 1.2+ in transit.

For European customers, data is hosted in Salesforce's EU data centres, ensuring compliance with data residency requirements. This enterprise-grade infrastructure provides the highest levels of security, availability, and performance.

Security Measures

GDPR Compliance Features

• Data Processing Agreements (DPA) available
• Right to access - export customer data on request
• Right to erasure - secure data deletion workflows
• Right to portability - data export in standard formats
• Consent management and tracking
• Breach notification procedures
• Regular security audits and assessments

Data Processing Role

Under GDPR, Thynk operates as a Data Processor, meaning you (the hospitality business) remain the Data Controller. We process personal data only according to your documented instructions and maintain strict confidentiality.

Our Data Processing Agreement clearly defines responsibilities, security measures, and procedures for handling data subject requests, ensuring full transparency and compliance.