Data processing agreement. For clients in the EU and the UK.

This data processing agreement (DPA) is part of our terms of service. It covers the personal data we process for you when we produce your podcast, as required by article 28 of the GDPR and the UK GDPR.

Roles

You are the controller: you decide why and how the recordings are used. The Journey Collective LTD, trading as Give the Mic, is the processor: we process the data only to produce and publish your podcast, on your instructions.

What we process

  • Recordings: voices and images of hosts and guests, and what they say.
  • Names, job titles and companies of hosts and guests, and their photos if you send them.
  • Contact details of guests, if we invite or brief them for you (Booker).
  • Contact details of the people at your company we work with.

What we do with it

We edit the recordings, make clips, quote cards, guest kits, pages and articles, and publish them where you ask us to. We do not use the data for anything else, we do not sell it, and we do not use it to train AI models.

Who can see it

Only the people who work on your show, and they are bound to confidentiality. We use a small number of sub-processors for hosting, file storage, transcription and AI processing. The current list, with the country for each, is available on request at hello@givethemic.com. We tell you at least 14 days before we add or replace one, so you can object.

Where the data goes

We are based in Israel. The European Commission and the UK have both decided that Israel protects personal data adequately, so data can go there without extra safeguards. Where a sub-processor is outside the EU, the UK or another adequate country, we use the standard contractual clauses or an equivalent safeguard.

Security

Access to your files is limited to the people who need it, accounts are protected with two-factor authentication where the service offers it, and files are stored with providers that encrypt them in transit and at rest.

If something goes wrong

If we become aware of a personal data breach that affects your data, we tell you without undue delay and within 48 hours, with what we know, so you can meet your own duty to report.

Requests from people

If a host or guest asks to see, correct or delete their data, or objects to a clip, we help you answer. If such a request reaches us directly, we pass it on to you.

Deleting

We delete raw recordings 90 days after the episode is delivered and finished files 90 days after your plan ends, as in our terms of service. You can ask us to delete or return everything earlier.

Checks

On request we give you the information you need to check that we keep to this agreement.

A signed copy

Need this agreement signed, or on your own template? Email hello@givethemic.com.

Last updated: 22 October 2026