Client data
Data Processing Terms
These terms apply where Performance Marketing processes personal data on documented instructions from a client acting as controller.
Last updated: 29 July 2026
Roles and instructions
The client determines the purposes and lawful basis for the personal data. We process it only to supply the contracted services, follow documented instructions, meet legal duties and protect the security of the service.
Details of processing
The subject matter, duration, nature, purpose, data types and categories of people are described in the proposal, system specification or client instructions. Processing may include hosting, storage, transmission, support, migration, troubleshooting and deletion.
Confidentiality and security
People authorised to process client data must be subject to appropriate confidentiality duties. Reasonable technical and organisational measures are used having regard to the nature of the data, risks, available technology and cost of implementation.
Sub-processors
Hosting, email, cloud, analytics, support and other providers may be used as sub-processors. We remain responsible for imposing appropriate data-protection obligations on appointed sub-processors and will provide relevant information on reasonable request.
Assistance
Taking account of the service and information available, we will provide reasonable assistance with data-subject requests, security incidents, impact assessments and regulator enquiries. Additional or urgent work may be chargeable where it falls outside normal support.
Security incidents
A confirmed personal-data breach affecting client data will be notified without undue delay after becoming aware of it, with available information needed for the client to assess its obligations.
International transfers
Personal data will not knowingly be transferred outside the United Kingdom without an appropriate legal mechanism and safeguards where required. The client acknowledges that approved cloud and platform providers may operate internationally.
Return, deletion and audit
At the end of the service, client data will be returned or deleted as reasonably requested, subject to backups, legal retention and technical limits. Reasonable compliance information will be supplied, and proportionate audits may be arranged where necessary without compromising other clients or security.
Questions about this document can be sent to contact@performance-marketing.uk.