Data Processing Agreement

Version 1.0 � February 2026

Demo Notice: This is a sample Data Processing Agreement for template demonstration purposes only. It is not a legally binding document.

1. Parties

This Data Processing Agreement ("DPA") is entered into between PeopleFirst Staffing ("Processor") and the Client organisation ("Controller") who engages our recruitment services.

2. Scope of Processing

PeopleFirst Staffing processes candidate personal data on behalf of the Client for the purpose of identifying, qualifying, and presenting suitable candidates for employment.

3. Data Categories

Personal data processed may include: names, contact details, employment history, qualifications, salary expectations, and right-to-work information.

4. Sub-Processors

We may engage sub-processors (e.g., our CRM provider, background check services) in line with UK GDPR Article 28 requirements. A current list is available on request.

5. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encryption, access controls, and regular security reviews.

6. Duration

This DPA remains in force for the duration of the engagement and data is retained in line with our retention policy thereafter.

7. Governing Law

This DPA is governed by the laws of England and Wales and subject to UK GDPR and the Data Protection Act 2018.

Back to Home GDPR Policy Privacy Policy