Get the DPA
Sent as a PDF by email, usually within one working day.
The DPA is email-gated on purpose: we like to know who is reviewing it so we can answer questions quickly and track edits.
What is in it
- Roles (Marketeer as processor, Customer as controller)
- Subject-matter, nature, purpose, and duration of processing
- Categories of personal data + categories of data subjects
- Technical and organisational measures (TOMs): encryption, access, audit, BCP/DR
- Sub-processor list and change-notification procedure (at least 30 days)
- UK and EU IDTA / SCCs for international transfers
- Audit rights, breach notification, return / deletion on termination