Data Processing Agreement
Last updated: 8 April 2026
Scope
This Data Processing Agreement (DPA) forms part of the service agreement between Parallel Agents Ltd ("Processor") and the client ("Controller"). It governs the processing of personal data in connection with our marketing automation services.
Data processed
In delivering our services, we may process:
- Email subscriber lists (names, email addresses)
- Customer purchase data from Shopify
- Social media audience data
- Ad platform audience and conversion data
- Website analytics data
Processing purposes
Data is processed solely to deliver the marketing services subscribed to by the Controller, including email campaigns, social media management, ad management, and reporting.
Security measures
Parallel Agents implements appropriate technical and organisational measures to protect personal data, including encrypted storage, access controls, regular security audits, and staff training.
Sub-processors
We use the following sub-processors in service delivery: Shopify (ecommerce), Mailchimp (email), Google (ads/analytics), Meta (ads/social). The Controller is notified of any changes to sub-processors.
Data subject rights
Parallel Agents assists the Controller in responding to data subject requests under UK GDPR, including access, rectification, erasure, and portability requests.
Data breach notification
In the event of a personal data breach, Parallel Agents will notify the Controller without undue delay and within 72 hours of becoming aware of the breach.
Contact
DPA queries: ak@parallelagents.co.uk