Data processing agreement
Last updated 8 July 2026
Draft — pending legal review. This is a working draft, not yet reviewed by a solicitor. It will be finalised before launch and before any customer connects client data.
When you process personal data through MetricScout — for example by connecting a client’s Google Analytics or Search Console account — MetricScout acts as your data processor under UK GDPR. We offer a data processing agreement (DPA) that sets out our obligations, and we will have it in place before you connect client data.
What the DPA covers
- The subject matter, nature and purpose of the processing
- That we process personal data only on your documented instructions
- Confidentiality, security measures and breach notification
- Use of sub-processors (see our sub-processor list) and notice of changes
- Assistance with data-subject requests and with your own obligations
- Return or deletion of personal data at the end of the service, per our retention & deletion policy
Requesting the DPA
Contact us to execute the DPA before connecting client data. The final wording is being confirmed with our data protection adviser.