Data Processing Agreement

Scope and instructions

This template is intended to form part of a signed agreement between Code Studios Ltd as Processor and the customer as Controller. The Processor processes Customer Personal Data only to provide, secure, support and maintain StudioFlow, follow documented customer instructions, comply with law and perform the customer agreement.

Processing details

• Subjects may include users, staff, contractors, clients, suppliers, project participants and client-portal users.
• Data may include identifiers, contact details, accounts, projects, communications, files, financial, payroll and HR records, usage/security data, and AI inputs and outputs.
• Processing lasts for the service term, an agreed return/deletion period and any lawful retention period.

Processor commitments

• Limit access to authorised personnel under confidentiality duties and maintain proportionate safeguards.
• Assist with verified data-subject requests and notify the customer without undue delay after confirming an applicable personal-data breach.
• Use disclosed subprocessors under appropriate obligations and return or delete customer data as agreed, subject to law.

Completion before signature

The signed version must identify both parties, effective date, governing law, security schedule, deletion period, breach contacts, subprocessor notice process, transfer mechanism and authorised signatures. Tanzanian counsel should approve it before use.