Data processing agreement summary

Roles

Your organisation is the controller of the personal data in your records. Cura⁺Cura plus Limited acts as your processor and handles that data only on your documented instructions.

What we commit to

• Process personal data only to provide the products and services in your agreement.
• Make sure our staff are bound by confidentiality.
• Apply appropriate technical and organisational security measures.
• Use sub processors only with your authorisation, under written terms that protect the data, and tell you about changes.
• Help you respond to requests from individuals exercising their rights.
• Tell you without undue delay if we become aware of a personal data breach.
• Return or delete your data at the end of the agreement, as you choose, unless the law requires us to keep it.
• Give you the information you need to show compliance, and allow reasonable audits.

Where data is hosted

Our products are hosted in the UK and EU. A list of sub processors is available on request.

Questions

Email hello@curaplus.dev to request the full agreement or our security pack.

Last updated

13 October 2026.