This Data Processing Agreement (the “Agreement”) is between:
LeaveWizard Ltd, registered in England and Wales, company number [Insert number], with its principal place of business at 14 Portman Crescent, Bournemouth, England. Registration number: 07506560 (“we”, “us”, “our”),
and
You, the customer, as defined under the Terms and Conditions (“you”, “your”).
This Agreement sets out how we handle personal data on your behalf and forms part of our Terms and Conditions.
1. Scope and Purpose
We’ll only process personal data to deliver our services to you, as set out in our Terms and Conditions. This includes things like managing employee leave, storing user accounts, sending notifications, and offering support.
2. Nature of Processing
We process data that you and your users provide when using our platform. This may include names, contact details, job titles, leave records, and other information related to your staff and their use of the system.
We process this data securely and solely on your instructions, unless legally required to do otherwise.
3. Our Commitments as a Processor
We agree to:
- Process data only under your instructions
- Keep your data safe by using appropriate technical and organisational measures
- Ensure confidentiality by limiting access to trained, authorised personnel
- Help you respond to GDPR rights requests, like data access or deletion
- Assist with audits and provide info to show we’re meeting our obligations
- Delete or return data once our services end, unless we’re legally required to keep it
4. Sub-processors
We may use carefully selected third parties to help us provide our services (like hosting providers or support tools). We make sure they meet GDPR standards too. You can request a current list of our sub-processors anytime.
We’ll notify you if we plan to add or change a sub-processor and give you the chance to object if you have concerns.
5. International Transfers
If we transfer data outside the UK or EEA, we’ll ensure appropriate safeguards are in place, like Standard Contractual Clauses approved by the European Commission or UK equivalents.
6. Your Responsibilities
As the data controller, you are responsible for the personal data you submit to our platform and for complying with applicable data protection laws, including ensuring you have the right to process your users’ data.
7. Term and Termination
This Agreement remains in force as long as we process personal data on your behalf. If our services end, we’ll delete or return your data unless we’re required by law to keep it.
8. Governing Law
This Agreement is governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the English courts.