- 20.1. Both Parties shall comply with their respective obligations under the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and any other applicable data protection or privacy legislation.
- 20.2. DarkKnight shall process any personal data obtained from the Customer in accordance with its Privacy Policy, a copy of which is available upon request or accessible at Privacy
- 20.3. DarkKnight shall implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.
- 20.4. DarkKnight shall not retain personal data for longer than necessary to fulfil the purposes of the Agreement, unless required by law or regulatory obligation.
- 20.5. In the event of any actual or suspected personal data breach affecting data processed under this Agreement, the affected Party shall notify the other without undue delay and cooperate in managing any legal or regulatory obligations arising from such breach.
- 20.6. In some circumstances, to deliver the Services, DarkKnight may act as a Data Processor on behalf of the Customer. Where this applies, the following provisions shall govern that processing relationship:
- 20.6.1. DarkKnight shall process personal data only on the documented instructions of the Customer, unless otherwise required by law;
- 20.6.2. DarkKnight shall ensure that persons authorised to process personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;
- 20.6.3. DarkKnight shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk;
- 20.6.4. DarkKnight shall assist the Customer in fulfilling its obligations to respond to requests from data subjects exercising their rights under data protection law;
- 20.6.5. DarkKnight shall assist the Customer in ensuring compliance with obligations relating to security of processing, breach notification, and data protection impact assessments;
- 20.6.6. DarkKnight shall, at the Customer’s choice, delete or return all personal data to the Customer upon termination of the Agreement, unless retention is required by law;
- 20.6.7. DarkKnight shall make available all information necessary to demonstrate compliance with this Clause and allow audits by the Customer or its authorised representatives, subject to reasonable notice and confidentiality;
- 20.6.8. DarkKnight shall not engage any sub-processor without the Customer’s prior written authorisation, and shall impose the same data protection obligations on any approved sub-processor.
- 20.7. Complaints and Communication
The Customer should promptly notify DarkKnight of any concerns, complaints, or queries relating to the Services, Goods, or Works provided under the Agreement.
DarkKnight is committed to resolving any concerns in a fair, transparent, and timely manner and shall have the opportunity to investigate and respond before any formal action is taken.
If the Customer is not satisfied with DarkKnight’s initial response, they should escalate thecomplaint in writing to:
Daryn Hesketh
DarkKnight Ltd
6 Floreat Gardens, Newbury, RG14 6AW
01635 946753
Daryn.Hesketh@darkknight.co.ukBoth Parties agree to use reasonable efforts to resolve disputes amicably before commencing any formal legal proceedings.