Data Processing Agreement

Last updated 20 August 2026

If your business uses Tsop Tech hosting or email to handle personal data belonging to your own customers or employees, you're the data controller for that data and we're the data processor — Article 28 of the GDPR requires a signed Data Processing Agreement (DPA) between us to cover that relationship.

1. Who needs one

Most personal hosting accounts don't need a DPA. You likely do if your website, email, or application stores personal data about identifiable individuals other than yourself — customer records, a mailing list, an online form that collects visitor details, and so on.

2. What it covers

The categories of personal data and data subjects your services process.
Our obligations as processor — acting only on your documented instructions, confidentiality, security measures, and breach notification.
The sub-processors we use (e.g. our infrastructure and payment providers) and how we handle changes to that list.
How data is returned or deleted at the end of your contract with us.

3. How to request one

Open a support ticket asking for a Data Processing Agreement, with your account details and company name. We'll send a copy for signature.

4. Related policies

See our Privacy Policy for how we handle personal data more broadly.