Legal
Data Processing for Clients
How we handle personal data when we build or run systems for business clients.
Last updated: 15 October 2026
Our role
When we build or operate a system for a client and that system involves personal data, the client is normally the controller and Infera Engine Ltd acts as a processor. We process that data only on the client's documented instructions and only for the agreed project.
Data processing agreement
Before we process personal data on a client's behalf, we put in place a written data processing agreement that meets the requirements of Article 28 of the UK GDPR, covering confidentiality, security, sub-processors, international transfers, assistance with data subject requests, breach notification, and the return or deletion of data at the end of the engagement.
Security
We apply access controls based on least privilege, encrypt data in transit, protect company accounts with two-factor authentication, and require everyone working on client data to keep it confidential.
Sub-processors
We tell clients which sub-processors will be used for their project and give them the chance to object, as set out in the data processing agreement.
Personal data breaches
If we become aware of a personal data breach affecting client data, we notify the client without undue delay and help them meet their own obligations.
Contact
Questions about data processing can be sent to privacy@inferaengine.com.
Infera Engine Ltd · Registered in England and Wales, company number 17520775 · Registered office: 128 City Road, London, EC1V 2NX, United Kingdom