Create Account

Data Processing Addendum (DPA)

Last updated: [14th January 2026]

This Data Processing Addendum (“DPA”) forms part of the Terms and Conditions between GetBooked Software Ltd (“GetBooked”, “we”, “us”, “our”) and the customer (“you”, “Customer”) and applies where GetBooked processes Personal Data on behalf of the Customer under UK GDPR.

  1. Definitions
  • “Applicable Data Protection Law” means the UK GDPR, Data Protection Act 2018, and any related regulations.
  • “Controller” means the entity that determines the purposes and means of processing Personal Data.
  • “Processor” means the entity that processes Personal Data on behalf of the Controller.
  • “Personal Data” means any information relating to an identified or identifiable natural person.
  • “Customer Data” means Personal Data submitted to GetBooked by or on behalf of the Customer.
  1. Roles of the Parties

For the purposes of Applicable Data Protection Law:

  • The Customer is the Data Controller
  • GetBooked acts as a Data Processor

GetBooked processes Personal Data only on documented instructions from the Customer and in accordance with this DPA.

  1. Scope of Processing

GetBooked may process Personal Data solely for the purpose of providing the Services, including:

  • Hosting and operating the GetBooked platform
  • Storing rental orders, customer records, and documents
  • Processing payments via third-party providers
  • Sending system notifications and messages
  • Providing customer support and technical assistance
  1. Categories of Personal Data

Depending on Customer use, Personal Data may include:

  • Names, email addresses, phone numbers
  • Billing and payment-related identifiers
  • Rental order details and documents
  • IP addresses and device information
  • User account credentials (excluding passwords)
  1. Security Measures

GetBooked implements appropriate technical and organisational measures to protect Personal Data, including:

  • Secure hosting environments
  • Access controls and authentication
  • Encryption in transit where applicable
  • Regular system monitoring and updates
  1. Sub-Processors

GetBooked may engage trusted sub-processors (e.g. hosting providers, payment processors, messaging services) to deliver the Services.

GetBooked ensures:

  • Sub-processors are subject to written data protection obligations
  • Sub-processors provide appropriate safeguards

A current list of key sub-processors may be provided on request.

  1. International Data Transfers

Where Personal Data is transferred outside the UK:

  • Transfers are made in accordance with Applicable Data Protection Law
  • Appropriate safeguards are applied, including adequacy decisions or Standard Contractual Clauses
  1. Customer Obligations

The Customer confirms that:

  • They have a lawful basis to collect and process Personal Data
  • They have provided appropriate privacy notices to their customers
  • Instructions provided to GetBooked comply with Applicable Data Protection Law
  1. Data Subject Rights

GetBooked will reasonably assist the Customer in responding to requests from data subjects, including:

  • Access
  • Rectification
  • Erasure
  • Restriction
  • Data portability

Where a request is received directly by GetBooked, it will be forwarded to the Customer unless legally prohibited.

  1. Personal Data Breaches

GetBooked will notify the Customer without undue delay upon becoming aware of a Personal Data breach affecting Customer Data and provide relevant information as required by law.

  1. Data Retention & Deletion

Upon termination of the Services:

  • Customer may request export of their data
  • Personal Data will be deleted or anonymised within a reasonable period, unless retention is required by law
  1. Audits

Upon reasonable written request, GetBooked will make available information necessary to demonstrate compliance with this DPA, subject to confidentiality and security obligations.

  1. Liability

Liability relating to data protection under this DPA is subject to the limitations set out in the Terms and Conditions.

  1. Governing Law

This DPA is governed by the laws of England and Wales and falls under the exclusive jurisdiction of its courts.

  1. Contact

For data protection enquiries, contact:

Email: support@getbooked.software
Website: https://getbooked.software