This Data Processing Agreement ("DPA") is made between Bundle Host, a trading name of Bundle Group Ltd ("Processor"), and you, the client ("Controller").

This DPA sets forth the terms and conditions under which the Processor will process personal data on behalf of the Controller in connection with the hosting services provided by Bundle Host.

• Personal Data: Any information relating to an identified or identifiable natural person, including but not limited to names, email addresses, payment information, and other identifying details.
• Processing: Any operation or set of operations performed on Personal Data, including collection, storage, use, sharing, and deletion.
• Data Subject: The individual to whom the Personal Data relates.
• Services: The hosting services provided by the Processor to the Controller.

The Processor will process Personal Data to provide the Services as requested by the Controller. This includes:

• Hosting data and applications
• Processing payments through third-party services
• Communicating with the Controller regarding account management and support

The Processor agrees to:

• Process Personal Data only on documented instructions from the Controller
• Implement appropriate technical and organizational measures to protect Personal Data
• Ensure that authorized personnel are bound by confidentiality obligations
• Assist the Controller in responding to Data Subject requests
• Notify the Controller without undue delay of any personal data breach
• Assist the Controller in ensuring compliance with applicable data protection laws

The Processor engages the following third-party service providers to assist in processing Personal Data:

• Hetzner: A hosting service provider used for storing and managing Personal Data securely.
• Stripe: A payment processing service that handles transactions involving Personal Data for billing and payment purposes.
• PayPal: An additional payment processing service that manages transactions and associated Personal Data.
• Unlimited Web Hosting UK Limited:A web hosting and domain management provider registered in England and Wales.
  Registered Office: The Copper Room, Deva Centre, Trinity Way, Manchester, M3 7BG.
  Company Number: 06786340.
  VAT Registration Number: GB 989668423.

The Processor ensures that all third-party service providers operate with robust data protection policies that comply with applicable data protection laws. While these providers are not bound by agreements with the Processor, they independently maintain high standards of data protection and security, consistent with the principles outlined in this DPA.

The Processor will retain Personal Data only for as long as necessary to fulfill the purposes outlined in this DPA and as required by applicable laws. Upon termination of the Services, the Processor will delete or return all Personal Data to the Controller, as instructed, unless retention is required by law.

By engaging the services of Bundle Host and the respective Processors, both parties acknowledge that they have read, understood, and agree to be bound by this Data Processing Agreement.