This Agreement is entered into by and between:
Strategic Content Marketing Ltd (t/a Sales While You Sleep), a company incorporated in England and Wales with registered office at 128 City Road, London, United Kingdom, EC1V 2NX, company number 11660697 (the "Processor" or "Sales While You Sleep")
AND
The customer or user of Sales While You Sleep's services who has accepted the Sales While You Sleep Terms of Service (the "Controller" or "Client").
This Data Processing Agreement ("DPA") forms part of the Terms of Service between the parties.
Controller: The party that determines the purposes and means of processing personal data.
Processor: The party that processes personal data on behalf of the Controller.
Data Subject: An individual whose personal data is processed.
Personal Data: Any information relating to an identified or identifiable natural person.
Sub-processor: Any third party engaged by the Processor to assist in fulfilling its obligations.
Services: The email marketing automation platform and related services as described in the Terms of Service and Scope of Services.
Sales While You Sleep will process Personal Data only as necessary to deliver the Services. Processing includes: storage, transmission, automation (workflows/emails/SMS), analytics, and communications as instructed by the Controller.
Sales While You Sleep agrees to:
• Process Personal Data only on documented instructions from the Controller (unless required by law).
• Ensure staff with access are bound by confidentiality obligations.
• Implement technical/organisational security measures (e.g., encryption in transit/rest, role-based access, firewalls, activity logging).
• Notify Controller without undue delay of any Personal Data Breach.
• Assist Controller with Data Subject rights, DPIAs, and ICO consultations.
• At Service end, delete or return all Personal Data (Controller's choice) unless legally required to retain.
• Maintain processing records per UK GDPR Art. 30(2).
The Controller agrees to:
• Ensure Personal Data is lawfully collected and shared with Processor.
• Provide clear, lawful instructions.
• Comply with PECR/UK GDPR for marketing consents (e.g., opt-ins, unsubscribes).
• Remain responsible for Data Subject rights and compliance.
Sales While You Sleep uses these sub-processors:
Our Sub-processors:
GoHighLevel Inc. - CRM/automation platform - USA (SCCs + UK IDTA)
Twilio Inc. / LeadConnector - SMS/voice/email delivery - USA (SCCs + UK IDTA)
Amazon Web Services (AWS) - Data hosting/storage - UK/EU regions
Changes notified 14 days in advance by email to [email protected].
Sub-processors are bound by equivalent obligations. Controller notified of changes via email ([email protected]) 14 days in advance. Object on reasonable grounds within 7 days. Full list: saleswhileyousleep.com/subprocessors.
For US sub-processors, Sales While You Sleep uses UK International Data Transfer Addendum to EU SCCs (2025 version) or equivalent safeguards. Details available on request.
Processor notifies Controller immediately of Data Subject requests and assists (at Controller's cost) with access, rectification, erasure, restriction, portability, objection. Does not respond directly unless legally required.
Processor implements risk-appropriate measures including:
ISO 27001‑compliant HighLevel platform
Encryption (TLS 1.3 transit, AES‑256 rest)
MFA/role‑based access
Regular penetration testing/backups
Breach detection/alerting
Details in Security Appendix (request via [email protected]).
Controller may request annual compliance info. Processor provides self‑audit reports or allows reasonable remote audit (Controller expense, max 1/year, 10 days' notice). Subject to confidentiality.
Liability governed by Terms of Service (12 months' fees cap). This DPA does not expand it.
Effective from Terms acceptance. Ends with Services. Processor deletes/returns data within 30 days of termination request (Controller pays costs if return requested).
England and Wales law. Exclusive jurisdiction of English courts.
By using Sales While You Sleep and accepting Terms of Service, Controller accepts this DPA.
Last Updated: January 10, 2026 saleswhileyousleep