Data Processing Terms

These data processing terms apply where a business customer uses Easy Peasy Power Up to process personal data relating to its learners or staff.

1. Roles

The customer determines the learning purpose and which learner data is provided. To the extent required by applicable data protection law, the customer acts as controller and the Service acts as processor for that customer data.

2. Processing

We process learner and programme data to create and deliver learning, record progress, provide management views, support the Service and carry out the customer's documented instructions expressed through use of the product.

3. Confidentiality and Access

Access to customer data is restricted to people and service providers who need it to operate or support the Service, subject to appropriate confidentiality and security obligations.

4. Service Providers

The Service relies on infrastructure, AI, email and payment providers. Customer data may be processed by those providers where necessary to deliver the Service, subject to their applicable contractual and data protection arrangements.

5. Assistance

We will provide reasonable assistance with data subject requests, security incidents and other data protection obligations where the requested assistance relates to processing carried out through the Service.

6. Security Incidents

If we become aware of a confirmed personal data breach affecting customer learner data, we will notify the affected customer without undue delay where notification is required by applicable law.

7. Return and Deletion

On termination or completion, customer data may be deleted or retained only for legitimate operational, backup, dispute-resolution or legal purposes, after which it is deleted or anonymised where appropriate.

8. Additional Terms

A customer requiring organisation-specific data processing terms may request a separate DPA or security schedule before a larger rollout.