In certain cases, we also operate as a data processor and we collect, process and transfer personal data on behalf of our business customers in the provision of our services and products. In these circumstances, Company is acting as a data processor and our business customers remain the data controller in respect of personal data they provide to us.   Our business customers remain the data controllers with respect to any personal data that they provide to us for our provision of services. To the extent that we are acting as data processor, we act in accordance with the instructions of such customers regarding the collection, processing, storage, deletion and transfer of customer data, as well as other matters such as the provision of access to and rectification of personal data. We will only use such personal data for the purposes of providing the services and products for which our business customers have engaged us.   Our business customers are responsible for ensuring that these individuals’ privacy is respected, including communicating to the individuals in their own privacy policies who their personal data is being shared with and processed by. Where Company is acting as a data processor, we will refer any request from an individual for access to personal data which we hold about them to our customer. We will not usually respond directly to the request.   As a data processor, we may share personal data where instructed by our business customer. Where authorized by the business customer, we may also share personal data with third party service providers who work for us and who are subject to security and confidentiality obligations.   We will retain personal data which we process on behalf of our customers for as long as appropriate to provide services and products to our customers and in accordance with any agreement with our customers or as permitted by applicable law.