Data Processing Addendum (DPA)
Last updated: 11/03/2026
This DPA applies where Winyourclients processes personal data on behalf of a customer (“Controller”) as a processor in connection with services.
1. Roles
Customer: Controller (determines purposes/means).
Winyourclients: Processor (processes on Controller’s instructions).
2. Scope of processing
Subject matter: revenue systems diagnosis/installation, communications, reporting.
Duration: term of services + limited retention as agreed.
Nature & purpose: intake, routing, follow-up sequences, CRM configuration, reporting, support operations.
Data types: contact details, customer lead data, communications metadata.
Data subjects: customer’s leads, prospects, clients, employees (as applicable).
3. Processor obligations
We will:
process only on documented instructions;
ensure confidentiality of personnel;
implement appropriate security measures;
assist with data subject requests where feasible;
notify Controller of personal data breaches without undue delay (after becoming aware);
delete or return personal data at end of services, subject to legal retention.
4. Sub-processors
We may use sub-processors (e.g., CRM, email, analytics, automation tools). We will maintain a list of key sub-processors on request and ensure appropriate contractual protections.
5. International transfers
Where transfers occur, parties agree to use appropriate safeguards (e.g., contractual clauses or equivalent protections).
6. Audit / information
Upon reasonable request, we will provide information necessary to demonstrate compliance and allow audits where proportionate and non-disruptive (subject to confidentiality and security constraints).
Contact
Email: help@winyourclients.com.