Data Processing Agreement

Last updated: 8 April 2026

Scope

This Data Processing Agreement (DPA) forms part of the service agreement between Parallel Agents Ltd ("Processor") and the client ("Controller"). It governs the processing of personal data in connection with our marketing automation services.

Data processed

In delivering our services, we may process:

  • Email subscriber lists (names, email addresses)
  • Customer purchase data from Shopify
  • Social media audience data
  • Ad platform audience and conversion data
  • Website analytics data

Processing purposes

Data is processed solely to deliver the marketing services subscribed to by the Controller, including email campaigns, social media management, ad management, and reporting.

Security measures

Parallel Agents implements appropriate technical and organisational measures to protect personal data, including encrypted storage, access controls, regular security audits, and staff training.

Sub-processors

We use the following sub-processors in service delivery: Shopify (ecommerce), Mailchimp (email), Google (ads/analytics), Meta (ads/social). The Controller is notified of any changes to sub-processors.

Data subject rights

Parallel Agents assists the Controller in responding to data subject requests under UK GDPR, including access, rectification, erasure, and portability requests.

Data breach notification

In the event of a personal data breach, Parallel Agents will notify the Controller without undue delay and within 72 hours of becoming aware of the breach.

Contact

DPA queries: ak@parallelagents.co.uk