Data Processing Agreement

Last updated: 30 July 2026

This Data Processing Agreement (“DPA”) applies where NK Digital Solutions (“Processor”) processes personal data on behalf of a client (“Controller”) in the course of providing services, in accordance with UK GDPR Article 28. It supplements our general Terms & Conditions.

Subject matter and duration

We process personal data only for the duration of our service agreement with you, and only for the purpose of delivering the agreed services (e.g. website hosting, email marketing, analytics reporting).

Nature and purpose of processing

Processing may include storage, hosting, transmission, and analysis of personal data submitted through your website or provided by you, for purposes such as enquiry handling, email marketing, hosting, and reporting.

Types of data and data subjects

This typically includes names, contact details, and interaction data relating to your customers, subscribers, or website visitors, as applicable to the services you’ve engaged us for.

Our obligations as processor

• We will only process personal data on your documented instructions.
• We will ensure anyone processing the data is subject to a duty of confidentiality.
• We will implement appropriate technical and organisational security measures.
• We will only engage sub-processors (e.g. hosting or email platforms) with your general authorisation, and will ensure they are bound by equivalent data protection obligations.
• We will assist you in responding to data subject rights requests and in meeting your own UK GDPR obligations, including breach notification.
• We will notify you without undue delay if we become aware of a personal data breach.
• At the end of our engagement, we will, at your choice, delete or return all personal data, unless we’re required by law to retain it.
• We will make available information necessary to demonstrate compliance with this DPA and allow for audits on reasonable notice.

Sub-processors

We currently use reputable third-party providers for hosting, email delivery, and analytics as part of standard service delivery. A list of current sub-processors is available on request.

International transfers

Where any sub-processor transfers data outside the UK, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement or an adequacy decision.

Contact

For any questions about this DPA, contact hello@nkds.co.uk.