Data Processing Agreement

The engineer or business using TTP is the controller (“Customer”) and TTP The Trade Professionals LTD is the processor for personal data placed in professional records. This DPA forms part of the Terms.

Subject and duration: hosting, organising, generating, exporting, securing and supporting records for the account term and approved retention/export period. Nature and purpose: storage, retrieval, formatting, transmission at the Customer’s direction, backup, security and deletion. Data subjects: customers, landlords, agents, tenants, occupants, engineers, recipients and other job contacts. Data: names, contact details, addresses, signatures, property/appliance/job details, safety observations and related records. Special-category data must not be entered unless strictly necessary and lawful.

TTP processes data only on documented instructions in the Terms, product controls and support requests, unless UK law requires otherwise. The Customer warrants that instructions, collection, notices, lawful bases, disclosures, retention and responses to individuals comply with law.

TTP will limit access to authorised persons bound by confidentiality and use proportionate technical and organisational measures, including access control, encrypted transport, password hashing, environment-secret controls, logging, backups and incident procedures.

TTP may use vetted hosting, database, email, payment, storage, monitoring and support providers. TTP remains responsible for equivalent data-protection obligations and will maintain a list. Material new subprocessors will be notified in advance where practicable; reasonable objections based on data-protection grounds may be raised.

Taking account of the processing, TTP will reasonably assist with data-subject requests, security, breach assessment and notification, DPIAs and regulatory consultations. The Customer must not instruct TTP to respond as controller without authority.

TTP will notify the Customer without undue delay after becoming aware of a personal-data breach affecting Customer data and provide available information needed for assessment. Notification is not an admission of fault.

Restricted transfers outside the UK will use a lawful mechanism and appropriate safeguards. TTP maintains records of subprocessor locations and applicable UK transfer mechanisms, including adequacy regulations, the UK International Data Transfer Agreement or UK Addendum where required.

At termination, TTP will provide a reasonable export opportunity and then delete or anonymise Customer data according to the published retention schedule, unless law requires retention. On reasonable notice, TTP will provide information needed to demonstrate compliance and support proportionate audits, subject to confidentiality, security and cost controls.

If this DPA conflicts with the Terms on processing, this DPA prevails. Contact support@thetradeprofessionals.com. Processor: TTP The Trade Professionals LTD, company number 17517289, Suite Ra01, 195–197 Wood Street, London, United Kingdom, E17 3NU.