Data Processing Agreement
Effective Date: 24 March 2026
Purpose
This Data Processing Agreement (DPA) governs the processing of personal data by Precise Impact Ltd on behalf of clients ("Controllers") as part of our AI consulting and intelligent automation services.
Roles
- Controller: The client organisation that determines the purposes and means of processing
- Processor: Precise Impact Ltd, acting on the Controller's documented instructions
Processing Activities
As a Processor, we may process personal data to: configure and operate AI agent systems on behalf of clients, integrate with client CRM and business tools, provide consulting and implementation services.
Our Obligations as Processor
- Process personal data only on documented instructions from the Controller
- Ensure all personnel authorised to process data are bound by confidentiality
- Implement appropriate technical and organisational security measures
- Assist the Controller in responding to data subject rights requests
- Delete or return all personal data at the end of the engagement
- Provide all information necessary to demonstrate compliance
- Notify the Controller without undue delay of any data breach
Sub-processors
We use the following sub-processors. We will notify you of any intended changes and give you the opportunity to object:
- Railway.com, Infrastructure hosting (US, Standard Contractual Clauses)
- Anthropic, AI model processing (US, Standard Contractual Clauses)
International Transfers
Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions.
Governing Law
This DPA is governed by the laws of England and Wales and UK GDPR. To request a signed DPA for your engagement, please contact us.