← Back to QuoteLatch

Data Processing Agreement

Last updated: 26th August 2026

This Data Processing Agreement ("DPA") forms part of the QuoteLatch Terms of Service and governs the processing of personal data by LeftHandLabs Ltd ("QuoteLatch", "we", "us") on behalf of the business using the Service ("you", "the Controller").

1. Definitions and Roles

In relation to the personal data of your clients that you enter into the Service ("Client Data"):

  • You are the Data Controller.
  • QuoteLatch is the Data Processor.
  • Both parties will comply with all applicable requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Details of Processing

  • Nature and purpose: we process Client Data solely to provide the QuoteLatch service (generating quotes, issuing invoices, and facilitating payments) as described in our Terms of Service.
  • Duration: we will process the data for the duration of your active subscription.
  • Types of data: names, email addresses, postal addresses, and financial transaction details relating to the quotes and invoices you generate.
  • Categories of data subjects: your clients and customers.

3. QuoteLatch's Obligations

As a Data Processor, we agree that we will:

  • Process Client Data only on your documented instructions (which includes providing the Service via the application), unless required to do otherwise by UK law.
  • Ensure that all personnel authorized to process Client Data have committed themselves to confidentiality.
  • Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, protecting against unauthorized or unlawful processing, accidental loss, destruction, or damage.
  • Not transfer Client Data outside the UK/EEA unless appropriate safeguards are in place in compliance with UK GDPR.
  • Assist you, using appropriate technical and organizational measures, in fulfilling your obligation to respond to requests from your clients exercising their data subject rights.
  • Notify you without undue delay after becoming aware of a personal data breach affecting Client Data.
  • Assist you in ensuring compliance with your obligations relating to security, breach notifications, and data protection impact assessments.
  • Make available to you all information necessary to demonstrate compliance with these obligations.

4. Sub-processors

  • You grant us general authorization to engage sub-processors to assist in providing the Service. Our current sub-processors are Stripe (for payment processing) and Resend (for email delivery).
  • We will ensure that our sub-processors are bound by written agreements that impose the same data protection obligations as set out in this DPA.
  • We will notify you of any intended changes concerning the addition or replacement of sub-processors, giving you the opportunity to object to such changes.

5. Deletion of Data

Upon termination of your QuoteLatch account, we will, at your choice, delete or return all Client Data to you, and delete existing copies unless UK law requires storage of the personal data.