This Data Processing Agreement ('DPA') forms part of the contractual relationship between the Client (Data Controller) and DIT Universal Solutions (DITUS), acting as the Data Processor.

DIT Universal Solutions
61 Bridge St, Kington, HR35 3DJ
Email: info@dit-universal.com

1. Purpose of Processing

DITUS processes personal data solely for delivering contracted services including AI automation, SaaS platforms, OrgCloud, dashboards, AI agents, and digital applications.

2. Types of Data Processed

- Identity and contact data
- Operational and business data
- System usage logs
- Customer-facing data required for service delivery

3. Responsibilities of the Controller

The client must ensure lawful grounds for processing, data accuracy, and rights to share information.

4. Responsibilities of DITUS as Processor

DITUS agrees to process data only under client instruction, maintain confidentiality, apply appropriate security, notify breaches promptly, and ensure compliant subprocessors.

5. International Transfers

Data transfers outside the UK/EEA are protected using Standard Contractual Clauses or equivalent safeguards.

6. Confidentiality

All personnel are bound by confidentiality. This DPA complements any NDA agreed between parties.

7. Data Retention & Deletion

Data is retained only as required. Upon termination, the client may request deletion or export.

8. Breach Notification

DITUS will notify the client without undue delay and assist with regulatory requirements.

9. Subprocessors

DITUS may use secure, compliant subprocessors. A list is available upon request.

10. Data Subject Rights

DITUS assists the client with access, correction, deletion, objection, restriction, and portability requests.

11. Term & Termination

This DPA remains active for the duration of service engagement. Upon termination, DITUS will delete or return data on request.

12. Governing Law

This DPA is governed by the laws of England & Wales.