Data Processing
Nurture with Jyoti - United Kingdom
​
Parties
Controller: Nurture with Jyoti (sole trader), South London, UK (contact: nurturewithjyoti@outlook.com)
Processor: Any UK/EU/International service provider engaged by the Controller to process personal data on its behalf.
1. Purpose
To ensure all processing by the Processor on behalf of the Controller complies with UK GDPR and the Data Protection Act 2018.
2. Processor Obligations
• Process personal data only on documented instructions of the Controller.
• Ensure confidentiality and train personnel.
• Implement appropriate technical and organisational security measures.
• Assist the Controller with data subject rights, DPIAs and breach notifications.
• Sub‑processors only with prior written authorisation and equivalent protections.
• Delete or return personal data at end of services (unless retention required by law).
• Make available all information necessary to demonstrate compliance and allow audits.
3. International Transfers
Any transfer outside the UK must use an appropriate safeguard (UK Addendum to SCCs or adequacy).
4. Security & Breach
Notify the Controller of a personal data breach without undue delay and cooperate on impact assessment and notifications.
5. Term, Law and Jurisdiction
This DPA is governed by the laws of England and Wales with exclusive jurisdiction of its courts.
​
​
​
​
​
