Data Processing Agreement
This agreement sets out how Black Sofa processes personal data on behalf of our clients — ensuring security, compliance and transparency.
Effective date: 20 March 2026
1. Scope
This DPA supplements our Terms of Service and applies where Black Sofa processes personal data on behalf of clients as a data processor.
2. Processing Activities
We process employee names, addresses, NI numbers, salary information, and tax details solely for payroll services.
3. Security Measures
We implement appropriate technical and organisational measures to protect personal data.
4. Sub-processors
Clients will be informed of sub-processors and we ensure equivalent data protection standards.
5. Data Subject Rights
We assist clients in responding to data subject access requests under UK GDPR.