Legal
Data Processing Agreement
Last Updated: June 2026
Candaply provides Data Processing Agreements to subscribing organisations where Candaply processes personal data on their behalf.
Processing roles
In most customer relationships, the Client acts as Data Controller and Candaply acts as Data Processor under UK GDPR.
Processor commitments
- Process personal data only for agreed service purposes.
- Apply appropriate technical and organisational security measures.
- Support lawful data subject, deletion and export requests where required.
- Maintain appropriate confidentiality and supplier controls.
Request a copy
Please contact privacy@candaply.com to request the current Data Processing Agreement.