This DPA forms part of the agreement between NexGen eHub Limited (Processor) and the Customer (Controller).
1. Processing details
We process personal data solely to provide the services as instructed by the Customer.
2. Sub-processors
A current list of sub-processors is available on request; we notify Customers of material changes.
3. Security
Appropriate technical and organisational measures are in place, aligned with recognised industry practice.
4. International transfers
Transfers outside the UK are made with an adequate legal basis such as UK IDTA or SCCs.
5. Sub-Processor breach
We notify Customers without undue delay following a personal data breach.
This document is a plain-language template maintained by NexGen eHub Limited. It is not legal advice. Please consult a qualified adviser for your specific circumstances.