Data Processing Agreement (DPA)

Roles

• Acorn Media: acts as the Data Processor.
• Client: acts as the Data Controller.

Instructions

We will only process personal data based on your documented instructions or as necessary to provide the agreed hosting and digital services.

This includes processing website user information, form submissions, account records and other data required to deliver the service.

Security

We implement appropriate technical and organisational measures to protect personal data, including firewalls, SSL, encryption, access controls and secure data centre facilities.

These measures are designed to protect against unauthorized access, loss, destruction or damage of personal data.

Sub-Processors

You authorize us to use sub-processors such as data centre providers, hosting partners and third-party infrastructure services.

We will ensure any sub-processors we engage meet the same data protection and security standards that we apply to our own operations.

Data Breaches

If we become aware of a security breach affecting your data, we will notify you without undue delay, usually within 24–48 hours.

We will provide all reasonably available information to support your obligations under GDPR and any regulatory reporting requirements.