Data Processing Agreement

This Data Processing Agreement (“DPA”) forms part of the Terms of Service between your organisation (“Controller”) and Trickle Hub Ltd (“Processor”) and applies where we process personal data on your behalf under UK/EU data protection law.

1. Roles & scope

You are the Controller of the Customer Data you upload about your staff; we are the Processor. We process Customer Data only to provide the Service and on your documented instructions (including as configured through the product).

2. Processor obligations

• Process personal data only on your instructions and for the Service;
• Ensure personnel with access are bound by confidentiality;
• Implement appropriate technical and organisational security measures;
• Assist you, taking into account the nature of processing, with data subject requests and with your security, breach-notification and impact-assessment obligations;
• Notify you without undue delay after becoming aware of a personal data breach.

3. Sub-processors

You authorise us to engage sub-processors (e.g. hosting, email, payments) to support the Service, subject to written terms imposing equivalent data-protection obligations. We remain responsible for their performance and will inform you of intended changes so you may object on reasonable grounds.

4. Data subject rights

Taking into account the nature of the processing, we will assist you by appropriate technical and organisational measures — including in-app export and deletion tools — to respond to requests to exercise data subject rights.

5. International transfers

Where we transfer personal data internationally, we will do so subject to appropriate safeguards such as standard contractual clauses.

6. Return & deletion

On termination or at your request, we will delete or return Customer Data (at your choice) and delete existing copies except where storage is required by law. Workspace deletion permanently removes Customer Data after a short backup-retention window.

7. Audits

We will make available information reasonably necessary to demonstrate compliance with this DPA and allow for and contribute to audits, subject to reasonable confidentiality and security conditions.

For a signed copy or enterprise DPA terms, contact privacy@tricklehub.com.