Data Processing Agreement

Last updated October 11, 2026

This DPA forms part of the Terms of Service between BuyRealClients and customers who process personal data through the service. It applies automatically; no signature is required. If your organization needs a countersigned copy, contact us.

1. Scope and roles

When you upload, store or manage personal data in BuyRealClients (for example, saved lists, notes or exports), you act as the controller and we act as your processor. For the professional profiles in our database, BuyRealClients is an independent controller, as described in our privacy policy.

2. Our commitments as processor

Process customer personal data only on your documented instructions
Ensure staff with access are bound by confidentiality
Implement appropriate technical and organizational security measures
Assist you in responding to data subject requests
Notify you without undue delay, and within 72 hours, of a personal data breach affecting your data
Delete or return customer personal data at the end of the service
Make available information needed to demonstrate compliance

3. Security measures

Area	Measures
Encryption	TLS in transit; contact values encrypted at rest with AES-256-GCM in a separate store
Access control	Role-based access, least privilege, logged administrative actions
Application	Hashed passwords and API keys, rate limiting, input validation on every endpoint
Availability	Regular backups and monitored infrastructure

4. Sub-processors

We use sub-processors for hosting, payment processing (Stripe) and transactional email. We will give notice of new sub-processors and you may object on reasonable grounds. A current list is available on request.

5. International transfers

Transfers of personal data outside the EEA, UK or Switzerland are covered by the Standard Contractual Clauses or another valid transfer mechanism.

6. CCPA

Where we process personal information on your behalf, we act as a “service provider” and will not sell or share it, or use it outside the direct business relationship with you.

7. Contact

For a countersigned DPA or sub-processor list, email support@buyrealclients.com or use our contact form.

This document is provided for transparency and does not replace advice from your own counsel.