Where iTS Group acts as a data processor, we operate under signed Data Processing Agreements (DPAs) governing our obligations, sub-processor usage, and breach notification timelines in line with UK and EU GDPR requirements. DPAs are available on request.