Data Processing Agreement

Our Data Processing Agreement sets out our commitments to the security and privacy of our customer's data. This reflects all of our contractual requirements as defined by the General Data Protection Regulation (GDPR), and the UK Data Protection Act 2018 (DPA - which is the UK's implementation of the GDPR).

This includes our commitments to:

• only process your data in line with your instructions
• maintain the confidentiality of your data and ensure sufficient staff training on data protection
• ensure appropriate security of, and access to, your data
• provide relevant data retention and deletion policies
• support controllers by facilitating data subjects' rights and with incident notifications
• utilise sub-processors and international data transfers in a compliant manner

We have updated our data processing agreement so that it includes the latest available provisions for the transfer of data internationally. Specifically, we have included the UK Addendum to the  European Commission-approved Standard Contractual Clauses (SCCs), to ensure all international data transfers are compliant with the latest UK and EU legislation. More information about the UK Addendum is available on the ICO's website.

This agreement is already included as part of our standard terms and conditions, so customers who have recently renewed their agreement with us will already have these latest changes in place.

If you have not yet signed up to our latest Data processing Agreement, and wish to do so, please sign your own copy of the agreement using this link.