Legal · DPA
Data Processing Agreement
This document is being prepared. For immediate inquiries, contact [email protected].
Parties
This Data Processing Agreement (DPA) is entered into between the customer organisation (the Controller) and OndLingua Ltd. (the Processor). The DPA forms part of, and is governed by, the master services agreement between the parties.
Scope
OndLingua processes personal data on behalf of the Controller solely to deliver the interpretation services described in the order form: routing requests, connecting interpreters, recording session metadata, and producing invoices and audit packs.
Processing terms
Processing is limited to the categories, purposes, duration and data subjects set out in Schedule 1 of the DPA. OndLingua applies appropriate technical and organisational measures aligned with ISO 27001, NHS DSPT, and HIPAA where applicable.
Sub-processors
A current list of approved sub-processors is maintained and provided on request. Material changes are notified at least 30 days in advance, with a right for the Controller to object.
Termination
On termination of the master agreement, OndLingua will return or delete all Controller personal data within 60 days, except where retention is required by statute. Deletion certificates are provided on request.
Last updated · 2026-05-25 — placeholder. Real legal copy lands before commercial launch. Contact [email protected] for immediate inquiries.