Data Processing Agreement
How we handle the data you entrust to us
Our role under data-protection law
The contracting party under any Data Processing Agreement is Elevelay Ltd, a company registered in Scotland (SC898093), which operates Tidy Names.
Under UK GDPR, Tidy Names plays two roles depending on the data involved. For your own account information - your name and email - we are a data controller, and our Privacy Policy explains how we handle it.
For the data you bring into Tidy Names to run the service - your domain portfolio, registrar metadata, and the encrypted registrar credentials you connect - we act as your data processor. We process that data only on your instructions and only to provide the service. A Data Processing Agreement (DPA) sets out that relationship in the terms required by Article 28 of the UK GDPR.
Sub-processors
We use a small, defined set of trusted third parties to help deliver the service. Our current sub-processors - what each one does and the data it processes - are published and kept up to date at tidynames.com/legal/subprocessors, and form part of this agreement.
International transfers
Our infrastructure and sub-processors are located in the United States. Where personal data is transferred outside the UK or EEA, we put appropriate safeguards in place, and the applicable transfer mechanism is described in the DPA.
Requesting a DPA
If your organisation needs a signed Data Processing Agreement, email privacy@tidynames.com and we will provide our current DPA for signature. It incorporates the sub-processor list above and reflects the security measures described in our Privacy Policy.
Contact
Questions about how we process your data? Contact us at privacy@tidynames.com.