Legal · Draft
Data processing agreement
Draft: not yet in force.This data processing agreement is a placeholder while our lawyers write the real one. It isn't a contract and you can't rely on it. The final version will be published here before anyone is charged.
What the final DPA will cover
When you use Wardlark, your organisation is the controller of your device data and Sideshoot Holdings Limited is your processor. The DPA will be part of the terms of service and will set out, under UK GDPR:
- The data we process, whose it is, and what we do with it: managing and reporting on your devices, nothing else.
- Our security measures, including UK hosting, per-organisation encryption of recovery keys, and audit logging.
- Our subprocessors, and how we tell you before adding a new one.
- International transfers, and the safeguards we use for them.
- How we help with data subject requests, breach notification, and audits.
- Deleting or returning your data when you leave.
Need a signed DPA for a procurement process? Email privacy@wardlark.com.