Effective Date: June 1, 2025
Data Processing Agreement (DPA)
This Data Processing Agreement (“Agreement“) is between you ("The Company") and Pryseflow Ltd ("Pryseflow", "Processor") and forms part of your overall privacy policy and terms.
Recitals
(A) Pryseflow Ltd acts as a Data Controller.
(B) Pryseflow wishes to subcontract certain services involving the processing of personal data to the Data Processor.
(C) This Agreement ensures compliance with applicable data protection laws including the GDPR, POPIA, NDPR, and others.
(D) The Parties wish to define their data protection obligations clearly.
Definitions and Interpretation
Standard GDPR-compliant definitions are maintained, including "Controller", "Processor", "Data Subject", "Processing", "Personal Data", "Personal Data Breach", and others as per Regulation (EU) 2016/679.
Processing of Company Personal Data
Processor shall comply with applicable laws and only process data on documented instructions of Pryseflow.
Processor Personnel
Processor must ensure that all personnel with access to Company data are under strict confidentiality obligations.
Security
Processor must implement robust technical and organizational measures to secure personal data, including those outlined in Article 32 of GDPR.
Subprocessing
Subprocessors may only be appointed with prior written authorization from Pryseflow.
Data Subject Rights
Processor shall assist Pryseflow in fulfilling data subject rights and notify Pryseflow of any direct data requests.
Personal Data Breach
Processor must notify Pryseflow of any breach without undue delay and assist in its resolution.
Data Protection Impact Assessment
Processor will cooperate with Pryseflow in conducting data protection impact assessments and prior consultations where necessary.
Deletion or Return of Data
Pryseflow reserves the right to audit Processor's compliance with this Agreement, upon reasonable notice.
Data Transfer
Data may not be transferred outside the UK/EU without prior written approval. SCCs or equivalent safeguards must apply.
Disclaimer of Warranties
Our services are provided 'as-is'. We do not warrant that they will be uninterrupted, error-free, or meet all your requirements. All risks related to your use remain with you.
Confidentiality and Notices
Both Parties shall maintain confidentiality of shared information and provide written notices as needed.
Governing Law and Jurisdiction
This Agreement shall be governed by the laws of England and Wales, and disputes shall be resolved by UK courts.
Pryseflow Ltd Capital Office,
152-160 City Road, London EC1V 2NX
Email: howcanwehelp@pryseflow.com