For Landlords, Letting Agents & Commercial Clients

Last Updated: July 2026

This Data Processing Agreement (“Agreement”) forms part of the service relationship between Lock & Key Locksmiths (“Processor”) and the landlord, letting agent, or commercial client (“Controller”).

1. Purpose

The Processor may handle personal data on behalf of the Controller for the purpose of delivering locksmith services, property access, compliance checks, and maintenance tasks.

2. Types of Data Processed

• Tenant names

• Contact details

• Property addresses

• Access instructions

• Service records

• Photos of locks, doors, or property issues

3. Processor Obligations

Lock & Key Locksmiths shall:

• Process data only on documented instructions from the Controller

• Ensure confidentiality Implement appropriate security measures

• Assist the Controller in fulfilling GDPR obligations

• Notify the Controller of any data breach

• Delete or return data upon request (unless legally required to retain)

4. Controller Obligations

The Controller shall:

• Provide accurate and lawful data

• Ensure tenants are informed of processing activities

• Maintain GDPR compliance within their organisation

• Ensure lawful basis for sharing data with the Processor

5. Sub Processors

We may use GDPR compliant third party providers such as:

• Payment processors

• Accounting software

• IT and hosting providers

6. Data Breach Notification

We will notify the Controller within 72 hours of becoming aware of a personal data breach.

7. Term & Termination

This Agreement remains in effect for the duration of the service relationship. Upon termination, data will be returned or securely deleted unless retention is legally required.

8. Governing Law

This Agreement is governed by the laws of Scotland.