Data Processing Addendum
Last updated: 2026-08-04
This DPA forms part of the Details Terms of Service and applies where we process personal data on your behalf. This is a template you should have reviewed by qualified counsel.
1. Roles
Customer is the controller and Details is the processor of Customer Personal Data processed to provide the service.
2. Nature and purpose of processing
Storage, organisation, retrieval, transmission and deletion, solely to provide, secure and support the Details service.
3. Categories of data subjects
Customer's own personnel and Customer's end clients whose data is entered into Details.
4. Categories of personal data
Names, business contact details, engagement details, time entries, task activity, invoicing data.
5. Sub-processors
Customer authorises the sub-processors listed in the Privacy Policy. We will notify Customer of new sub-processors.
6. Security measures
TLS in transit, encryption at rest, RLS, HIBP password checks, audit logging, least-privilege service accounts.
7. Data subject rights
We assist Customer in responding to data subject requests, including via in-product export and deletion tools.
8. Breach notification
We will notify Customer without undue delay after becoming aware of a personal data breach.
9. International transfers
Governed by Standard Contractual Clauses and UK IDTA as applicable.
10. Deletion
On termination, Customer may export data for 30 days after which we delete it, subject to backup rotation of up to 90 days.