UNIVERSAL DATA PROCESSING ADDENDUM (DPA)

This DPA forms part of the Service Agreement between Get Pixel Perfection Limited (“Processor”) and the [Client Company Name] (“Controller”).

1. Subject Matter

The Processor provides hosting, technical, and operational services for one or more web or mobile applications operated by Get Pixel Perfection Limited, through which the Controller stores or manages personal and/or special-category data.

2. Duration

This DPA remains in force for as long as the Processor processes personal data on behalf of the Controller.

3. Processor Obligations

The Processor shall:

• process data only on the Controller’s documented instructions;
• maintain appropriate security, encryption, and access controls;
• ensure authorised personnel are bound by confidentiality;
• assist the Controller with data-subject requests;
• notify the Controller without undue delay of any personal-data breach;
• delete or return all personal data at the end of the Service; and
• maintain records of processing activities as required by law.

4. Sub-Processors

4.1 The Controller authorises the Processor to use sub-processors necessary for infrastructure and operations, including Google LLC (Firebase / Google Cloud) and other providers notified to the Controller.

4.2 The Processor shall ensure equivalent data-protection obligations are imposed on all sub-processors and shall remain liable for their acts or omissions.

5. International Transfers

Personal data will be stored within the UK and EEA. If transferred elsewhere, the Processor will ensure appropriate safeguards (e.g. UK Addendum to EU Standard Contractual Clauses) are in place.

6. Liability and Indemnity

The Processor’s liability under this DPA is limited as set out in the Service Agreement.

7. Contact Information

Data Protection Contact: Get Pixel Perfection Limited
Email: [your email]
ICO Registration: [your ICO number]

8. Governing Law

This DPA is governed by the laws of England and Wales.