This Data Processing Agreement (“DPA”) forms part of the Service Agreement between Web It Square (“Data Processor”) and the Client (“Data Controller”).
This DPA outlines how personal data is processed when providing website development and digital marketing services.
1. Definitions
Data Controller: The Client who determines the purpose and means of processing personal data.
Data Processor: Web It Square, which processes personal data on behalf of the Client.
Personal Data: Any information relating to an identified or identifiable individual.
Processing: Any operation performed on personal data such as collection, storage, use, or deletion.
2. Scope of Processing
Web It Square may process personal data only as necessary to provide services such as:
WordPress Website Development
Website Hosting Configuration
SEO & Analytics Setup
Social Media Marketing
Email Marketing Integration
Processing activities may include:
Accessing website databases
Managing customer contact forms
Integrating analytics tools
Configuring marketing platforms
3. Nature & Purpose of Processing
Personal data is processed strictly for:
Delivering agreed services
Website functionality
Marketing setup and optimization
Performance tracking
Technical support
Web It Square does not process personal data for its own marketing purposes without client consent.
4. Categories of Data Subjects
Data subjects may include:
Website visitors
Customers of the Client
Newsletter subscribers
Social media followers
5. Types of Personal Data Processed
Depending on the project, data may include:
Name
Email address
Phone number
IP address
Business details
Website analytics data
6. Data Protection & Security Measures
Web It Square implements reasonable technical and organizational measures to protect personal data, including:
Secure password practices
Limited access control
Use of trusted hosting providers
Use of secure plugins and tools
However, no system can guarantee 100% security.
7. Confidentiality
Web It Square ensures that:
All personal data accessed during service delivery remains confidential.
Data is not shared with unauthorized third parties.
8. Sub-Processors
Web It Square may use third-party service providers (sub-processors) such as:
Hosting companies
Analytics tools (e.g., Google Analytics)
Email marketing platforms
Payment gateways
These providers are responsible for complying with their own data protection obligations.
9. International Data Transfers
If personal data is transferred outside India or the Client’s jurisdiction, it will be done using:
Reputable service providers
Platforms that follow standard data protection practices
10. Data Retention
Personal data will be retained only:
For the duration of the service agreement
As required by applicable law
Upon termination, data access may be removed unless otherwise required.
11. Data Subject Rights
If applicable under laws such as GDPR or other data protection regulations, data subjects may have the right to:
Access their data
Request correction
Request deletion
Restrict processing
Clients (Data Controllers) are responsible for handling such requests.
12. Breach Notification
In case of a known data breach affecting client data:
Web It Square will notify the Client within a reasonable timeframe.
Necessary steps will be taken to mitigate risks.
13. Termination of Processing
Upon termination of services:
Access to personal data will be removed.
Data may be deleted unless legally required to retain it.
14. Governing Law
This DPA shall be governed by the laws of India unless otherwise agreed in writing.
15. Contact Information
For questions regarding this Data Processing Agreement, please contact:
