Data Processing Agreement

This Data Processing Agreement ("DPA") forms part of the Terms of Service between Stratmore Group Ltd ("Processor") and the User ("Controller").

1. Definitions

"Data Protection Laws" means the UK GDPR, the Data Protection Act 2018, the EU GDPR where applicable, and any other applicable data protection legislation. "Personal Data", "Controller", "Processor", and "Processing" shall have the meanings given in the UK GDPR and, where applicable, the EU GDPR.

2. Subject Matter and Duration

The Processor will process Personal Data (specifically client email addresses, names, and invoice details) on behalf of the Controller for the purpose of providing automated invoice reminder services. The duration of processing is for the term of the Service until the data is deleted by the Controller or the account is closed.

3. Processor Obligations

The Processor shall:

  • Process Personal Data only on documented instructions from the Controller.
  • Ensure that persons authorized to process the Personal Data have committed themselves to confidentiality.
  • Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
  • Assist the Controller in fulfilling its obligations to respond to requests for exercising data subject rights.
  • Delete or return all Personal Data to the Controller after the end of the provision of services, unless storage is required by law.

4. Sub-processors

The Controller provides a general authorization for the Processor to engage sub-processors (such as hosting providers and email delivery services). The Processor shall inform the Controller of any intended changes concerning the addition or replacement of sub-processors.

5. Controller Obligations

The Controller represents and warrants that it has a valid legal basis (e.g., legitimate interest or contract) to process the Personal Data and to share it with the Processor for the purposes of the Service.

6. Liability

Each party's liability under this DPA shall be subject to the limitations of liability set out in the Terms of Service.

7. Contact

For any data protection inquiries, please contact [email protected].