Data processing agreement

The parties

Your organisation, as the controller of its donors' data, and Gift Aid API is a product of Mukras Ltd, a company registered in Scotland (company number SC369337), registered office 18 Brighton Place, Peterculter, Scotland, AB14 0UN. You can write to us at support@giftaidapi.co.uk. as its processor.

What is decided

• No donor data is processed for an organisation until it has accepted this agreement. Registration records which version it accepted.
• One agreement covers the organisation's whole history with us.
• We store only the donor details HMRC's Gift Aid claim requires.
• Claim records are kept for at least seven years. After that, nothing is deleted on age alone: records are deleted at your organisation's request, scheduled fourteen days ahead and withdrawable.

Sections to be written

• Subject matter, duration, nature and purpose of processing — to be written
• Our obligations as processor — to be written
• Sub-processors, and how we tell you of changes — to be written
• Security measures — to be written
• Assistance with data subjects' requests and breaches — to be written
• Deletion or return at the end — to be written