This Data Processing Agreement (“DPA”) forms part of the TradeTerra Terms of Service between you and Kye Prior, trading as TradeTerra. Kye Prior operates TradeTerra as a sole trader, not as a company registered at Companies House. It applies where we process personal data about your customers, leads, staff or suppliers on your behalf through the TradeTerra service.
1. Roles
You are the controller for personal data you enter into the Service. We act as your processor for that data. We are an independent controller for account, billing, support, security and usage data about you as a subscriber.
2. Processing instructions
We process customer data only to provide, secure, maintain and improve the Service, to send messages or emails you initiate or configure, to provide support, and to comply with law. We will tell you if we believe an instruction infringes UK data protection law.
3. Types of data
Customer data may include names, phone numbers, email addresses, postal addresses, job details, quote and invoice content, message content, call metadata, uploaded job files and notes. Do not upload special category data unless it is strictly necessary for your own lawful purpose.
4. Confidentiality and security
We restrict access to personal data to people and systems that need it to provide the Service. We use technical and organisational measures including encrypted transport, role-based access, Supabase row-level security, private storage for job attachments, webhook signature validation and operational monitoring.
5. Sub-processors
You authorise us to use sub-processors listed in the Privacy Policy, including hosting, database, email, billing, telephony and optional error monitoring providers. We remain responsible for sub-processor processing we appoint. We will update the Privacy Policy if our sub-processor list materially changes.
6. Assistance
We will provide reasonable assistance with data subject requests, security incidents, deletion requests and information needed for your compliance obligations, taking into account the nature of the Service and the information available to us.
7. Personal data breaches
If we become aware of a personal data breach affecting customer data we process for you, we will notify you without undue delay and provide information reasonably available to help you meet your own notification obligations.
8. Return and deletion
During your subscription, you can access most active records through the Service. On verified account deletion requests, we will delete or anonymise customer data within 30 days unless retention is required by law, dispute handling, security or backup processes.
9. International transfers
Some sub-processors may process personal data outside the UK. Where this happens, we rely on appropriate safeguards such as UK-approved transfer terms or equivalent arrangements.
10. Contact
Questions about this DPA should be sent to support@tradeterra.co.uk, or by post to 417 Avonside House, East Station Road, Peterborough, PE2 8UA, United Kingdom.