Skip to Content
WebSys Cloud
Sign in Start free
← All documents

Data Processing Agreement

Version 1.0

This agreement applies where your instance contains personal data. For that data you are the controller and we are the processor.

Subject matter and duration

We process personal data only to provide the hosting service, for as long as your subscription lasts plus the thirty-day retrieval window described in the Terms of Service.

Nature and purpose

Hosting, storage, backup, restoration, and technical support. We do not analyse the contents of your instance, and we do not use it to train anything.

Types of data and categories of people

Whatever you choose to put in your instance. Typically that includes your employees, customers, suppliers and their contact details; it may include special category data if your use requires it, in which case you should tell us so we can advise on whether the plan is appropriate.

Our obligations

  • We process personal data only on your documented instructions, including about transfers, unless the law requires otherwise — and if it does, we tell you first unless the law forbids that.
  • Our staff are bound by confidentiality.
  • We keep the security measures described in the Data Protection Policy.
  • We assist you with data subject requests, impact assessments, and regulator enquiries, so far as is reasonable.
  • We notify you of a personal data breach without undue delay and within seventy-two hours of becoming aware of it.
  • On termination we return or delete the data as you choose.
  • We make available what you need to verify our compliance, and allow an audit on reasonable notice, no more than once a year unless a regulator or an incident requires otherwise.

Sub-processors

You give general authorisation for us to use the sub-processors listed on the Sub-processors page. We give at least thirty days' notice before adding one. If you reasonably object, we will work with you to find an alternative; if there is none, you may terminate the affected service without penalty for the unused period.

Transfers

Where a sub-processor processes data outside Ghana, we put appropriate contractual safeguards in place with that sub-processor.

Your obligations

You confirm you have a lawful basis for the personal data you place in your instance, that you have given the people concerned the information they are owed, and that your instructions to us do not require us to break the law.