Data Processing Agreement (DPA)
Last Updated: 9 March 2026
This Data Processing Agreement forms part of the service relationship between Wigan SEO and any client who engages our digital marketing services.
This agreement sets out how personal data is processed when Wigan SEO provides marketing, SEO, advertising, and related digital services.
This agreement is intended to comply with the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Throughout this document, “we”, “us”, and “our” refer to Wigan SEO.
“Client” refers to the business or individual who engages our services.
- Roles and Responsibilities
For the purposes of data protection legislation:
- The client acts as the Data Controller
- Wigan SEO acts as the Data Processor
The client determines the purposes and means of processing personal data.
Wigan SEO processes personal data only as necessary to deliver agreed marketing and digital services.
- Types of Data Processed
In the course of providing services, Wigan SEO may process certain categories of personal data on behalf of the client.
This may include:
- Website visitor analytics data
- Marketing campaign data
- Customer interaction data
- Advertising audience data
- Email marketing data
- CRM data used for marketing activities
The specific categories of personal data processed will depend on the services provided.
- Categories of Data Subjects
Personal data processed through marketing services may relate to:
- Website visitors
- Potential customers or leads
- Existing customers of the client
- Subscribers to marketing communications
Wigan SEO does not determine the identity of these individuals and processes the data only as required for marketing activities.
- Purpose of Data Processing
Personal data may be processed for purposes including:
- Search engine optimisation analysis
- Website performance monitoring
- Digital advertising management
- Marketing analytics and reporting
- Campaign performance measurement
- Website user behaviour analysis
Processing is limited to what is necessary to deliver agreed services.
- Platforms and Systems Used
To deliver marketing services, Wigan SEO may access or interact with third-party platforms including:
- Google Ads
- Google Analytics
- Google Search Console
- Email marketing platforms
- Customer relationship management (CRM) systems
- Website content management systems such as WordPress
- Marketing automation tools
These platforms operate under their own privacy and data processing policies.
- Processing Instructions
Wigan SEO will process personal data only in accordance with:
- The client’s instructions
- The agreed scope of services
- Applicable data protection laws
We will not use client data for any purposes outside the agreed services.
- Data Security
We take reasonable technical and organisational measures to protect personal data.
Security measures may include:
- Secure login and authentication systems
- Encrypted connections (HTTPS)
- Restricted access to marketing accounts
- Secure password management
- Monitoring for suspicious activity
While we take appropriate precautions, no online system can be guaranteed completely secure.
- Confidentiality
Any personal data accessed during the provision of services will be treated as confidential.
Wigan SEO will ensure that any individuals involved in delivering services are subject to confidentiality obligations.
Personal data will not be disclosed to third parties except where necessary to provide services or where required by law.
- Subprocessors
In order to deliver digital marketing services, Wigan SEO may rely on third-party service providers.
These may include:
- Website hosting providers
- Analytics platforms
- Advertising networks
- Email marketing platforms
- Marketing software tools
Where these services process personal data, they operate under their own data protection obligations.
- Data Retention
Personal data will only be retained for as long as necessary to provide services and fulfil contractual obligations.
Data retention periods may depend on:
- Platform settings
- Client requirements
- Legal obligations
When services end, access to client systems will normally be removed unless otherwise agreed.
- Data Subject Rights
Under UK GDPR, individuals have certain rights regarding their personal data.
These rights may include:
- The right to access personal data
- The right to request correction of inaccurate data
- The right to request deletion of data
- The right to restrict processing
- The right to object to processing
As the Data Controller, the client is responsible for responding to such requests.
Wigan SEO will assist where reasonably required.
- Data Breach Notification
If Wigan SEO becomes aware of a personal data breach affecting client data, we will notify the client without undue delay.
The client remains responsible for determining whether the breach must be reported to regulatory authorities or affected individuals.
- International Data Transfers
Some third-party marketing platforms used in digital marketing services may store or process data outside the United Kingdom.
These platforms typically rely on appropriate safeguards such as standard contractual clauses or equivalent data protection mechanisms.
- Termination of Services
Upon termination of services:
- Access to client systems will normally be removed
- Any remaining data held by Wigan SEO will be securely deleted where appropriate
- Ongoing data processing will cease
Certain records may be retained where required for legal or administrative purposes.
- Changes to This Agreement
We reserve the right to update this Data Processing Agreement where necessary to reflect:
- Changes in data protection law
- Updates to services or platforms used
- Changes in operational practices
Updated versions will be published on this page.
- Contact
If you have any questions regarding this Data Processing Agreement, you may contact us via the website: