Skeggs Visuals Ltd Data Processing Terms
Effective 29/09/2026
These terms apply where Skeggs Visuals Ltd (the Provider) processes personal data on behalf of a client (the Client) under a Client Agreement. They form part of that agreement. Words defined in our Standard Terms of Business have the same meaning here.
1. Roles
1.1 The Client is the controller and the Provider is the processor of the personal data, as defined in the UK GDPR and the Data Protection Act 2018.
2. Details of the processing
3. Provider obligations
3.1 The Provider will:
1. process the personal data only on the Client's documented instructions and only to perform the Services;
2. make sure anyone processing the data is bound by confidentiality;
3. keep the data secure using appropriate technical and organisational measures;
4. not transfer the data outside the UK unless adequate safeguards are in place under data protection law;
5. help the Client, at the Client's reasonable cost, to respond to requests from individuals and to meet its security and breach obligations;
6. tell the Client without undue delay, and within 48 hours, after becoming aware of a personal data breach; and
7. make available the information reasonably needed to show compliance with these terms.
4. Sub-processors
4.1 The Client authorises the Provider to use the software providers it uses to deliver the Services (such as scheduling, file storage and email tools) as sub-processors. The Provider will make sure each sub-processor is bound by data protection terms no less protective than these.
4.2 The Provider will tell the Client before adding or changing a sub-processor, and the Client may object on reasonable grounds.
5. Client obligations
5.1 The Client is responsible for having a lawful basis and giving the required privacy information for all personal data it provides or asks the Provider to collect, including consent for marketing emails and texts where needed.
6. End of processing
6.1 Within 30 days after the Client Agreement ends, the Provider will delete or return the personal data, as the Client chooses, unless the law requires it to be kept.
6. End of processing
6.1 Within 30 days after the Client Agreement ends, the Provider will delete or return the personal data, as the Client chooses, unless the law requires it to be kept.
Item | Detail |
|---|---|
Data subjects | The Client's customers, members, leads and prospects |
Types of personal data | Names, contact details, enquiry details and marketing preferences |
Nature and purpose | Collecting leads and enquiries, managing email lists and automations, updating CRM records, and reporting |
Duration | The term of the Client Agreement, plus the time needed to return or delete the data |
Subject matter | Providing the Services under the Client Agreement |