Data Processing Agreement
1.Roles & scope
Under this DPA, you (the customer) are the controller and SeekaHost Technologies Ltd is the processor of the personal data contained in your subscriber lists and processed through the Service. We process that data only to provide the Service and on your documented instructions, which are given through your use of the platform and these terms. You are responsible for the lawfulness of the data and instructions you give us.
2.Processing details
| Subject matter | Providing the SeekaHost.email email marketing platform. |
|---|---|
| Duration | For as long as you use the Service, plus any period needed to return or delete data. |
| Nature & purpose | Storing, organising, segmenting and sending email to your subscribers, and reporting on results. |
| Types of data | Subscriber email addresses, names, custom fields you collect, consent records, and engagement data (opens, clicks, bounces, unsubscribes). |
| Data subjects | Your subscribers and contacts. |
| Special category data | Not intended. You must not upload special category data unless separately agreed with us. |
3.Our obligations
As your processor we will: process personal data only on your documented instructions; ensure people authorised to process it are under a duty of confidentiality; implement appropriate technical and organisational security measures (see below); engage sub-processors only as set out here; assist you with data-subject requests and with your obligations under Articles 32–36 UK GDPR; make available the information needed to demonstrate compliance and allow for audits on reasonable notice; and delete or return the data at the end of the service, as you choose.
4.Sub-processors
You authorise us to use the sub-processors below to provide the Service. We remain responsible for their performance, and we impose data-protection terms on them that are no less protective than this DPA.
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services (Amazon SES) | Platform hosting & email delivery | UK (London, eu-west-2) |
| Payment providers (e.g. Stripe, PayPal) | Billing & payments | UK / EU / US with safeguards |
| Support & analytics tools | Customer support & product analytics | UK / EU |
We keep a current list of sub-processors and will give you notice of any intended addition or replacement so you can object on reasonable data-protection grounds.
5.International transfers
Your subscriber data is stored and sent from the UK (and, where relevant, the EU). Where any transfer outside the UK is necessary, we rely on an appropriate safeguard — UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses — together with any additional measures required to keep the data protected.
6.Security measures
We maintain security measures appropriate to the risk, including:
- Encryption of data in transit (TLS) and encryption of stored data where appropriate.
- Role-based access controls and the principle of least privilege for our staff.
- Network security, monitoring and logging.
- Regular backups and resilience across the underlying infrastructure.
- Vetting of personnel and confidentiality obligations.
7.Assistance & breaches
We will help you respond to requests from your subscribers to exercise their rights, and support your data-protection impact assessments and consultations where reasonably needed. If we become aware of a personal data breach affecting your data, we will notify you without undue delay and provide the information you need to meet your own notification obligations.
8.Return & deletion of data
You can export your data at any time. When our services end, we will, at your choice, return or delete the personal data we process for you, except where we are required by law to keep certain records (such as suppression lists needed to honour unsubscribes).
9.Request the signed DPA
Need a countersigned DPA for your records or procurement? Email legal@seekahost.email or dpo@seekahost.email with your account and company details, and we’ll send the executable agreement — including the current sub-processor list and security schedule — for signature.
See also our Privacy Policy, Terms of Service and Acceptable Use Policy.