Back to sign up

Data Processing Agreement (DPA)

This Data Processing Agreement forms part of the Funeral Office Terms and governs the processing of personal data in accordance with UK GDPR and the Data Protection Act 2018.

Summary

Customers act as Data Controllers and Funeral Office acts as a Data Processor. We process data only on your instructions to provide AI CCTV analytics and monitoring services.

Roles

Customer: Data Controller
Funeral Office: Data Processor

Scope of processing

Processing includes video analysis, event detection, storage, and retrieval of CCTV-related data through the platform.

Types of data

This may include video footage, images of individuals, behavioural data, timestamps, device metadata, and system logs.

Categories of data subjects

Employees, customers, visitors, and members of the public captured by customer-operated CCTV systems.

Customer obligations

Customers are responsible for ensuring lawful data collection, including establishing a valid legal basis, providing appropriate notices, and complying with applicable surveillance laws.

Processor obligations

Funeral Office will:
• Process data only on documented instructions
• Ensure confidentiality of authorised personnel
• Implement appropriate technical and organisational measures
• Assist with data subject rights requests
• Notify customers of data breaches without undue delay

Sub-processors

We may use trusted sub-processors such as cloud infrastructure providers. All sub-processors are required to meet GDPR standards.

International transfers

Where data is transferred outside the UK or EEA, we apply appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

Security measures

We implement safeguards including encryption, access controls, logging, and regular security reviews to protect personal data.

Data subject rights

We assist customers in fulfilling GDPR rights such as access, rectification, erasure, restriction, and objection.

Data breaches

Funeral Office will notify the customer without undue delay after becoming aware of a personal data breach.

Data retention & deletion

Data is retained only as long as necessary for service provision or as required by law. Upon termination, data will be deleted or returned where applicable.

Audits

Customers may request reasonable information to demonstrate compliance with this agreement.

Contact

support@funeraloffice.co.uk