Agree before access
Keep the data scope
as clear as the work.
A public enquiry does not create a data processing agreement or grant account access. Any service-specific arrangement needs a separate review and agreement.
What needs to be defined?
- The parties, roles, purpose and types of information involved.
- The access needed, authorised people and least-privilege permissions.
- Hosting, providers, retention, security responsibilities and deletion.
- How requests, incidents and the end of the engagement are handled.
The website’s current enquiry and tool processing is described in the privacy information. A project requiring personal-data processing needs its own appropriate agreement before access is given.
Your next move starts here
Make search a more useful part of your growth.
Start with your website. Leave with a clearer picture of what to improve, what to measure and where to focus next.