Legal

Data Processing Agreement

Last Updated: June 2026

Candaply provides Data Processing Agreements to subscribing organisations where Candaply processes personal data on their behalf.

Processing roles

In most customer relationships, the Client acts as Data Controller and Candaply acts as Data Processor under UK GDPR.

Processor commitments

  • Process personal data only for agreed service purposes.
  • Apply appropriate technical and organisational security measures.
  • Support lawful data subject, deletion and export requests where required.
  • Maintain appropriate confidentiality and supplier controls.

Request a copy

Please contact privacy@candaply.com to request the current Data Processing Agreement.