This Data Processing Agreement explains how personal data is processed when an organisation uses Total Track. The processor is Malachi Jack Burnett trading as Wiizard Software. The controller is the organisation or provision using Total Track, unless another written agreement says otherwise.
Subject Matter And Purpose
Wiizard Software processes personal data to provide, host, maintain, secure, support, and administer Total Track for the organisation.
Data Subjects And Data Categories
The platform may process information about young people, parent/carers, staff, Senior Leadership users, organisation contacts, and support or business contacts. Data may include names, contact details, account details, roles, young person records, education records, medical logs, consent records, photos, media, audit/security information, exports, deletion workflow records, support correspondence, and invoicing correspondence.
Processor Obligations
Wiizard Software will process personal data only to provide, secure, support, maintain, and administer Total Track or as otherwise instructed by the organisation. Wiizard Software will keep data confidential, use reasonable security measures, assist with rights requests where reasonably possible, and support breach and data protection obligations where reasonably possible.
Controller Obligations
The organisation must give lawful instructions, make sure it has a lawful basis for the data it records, provide privacy information where required, manage access accurately, and keep its own devices, email accounts, policies, and internal processes secure.
Security Measures
Measures include Tailscale and SSH key administration, Docker isolation, Cloudflare routing, salted and hashed passwords, Senior Leadership email two-factor authentication, protected approvals, backend-enforced permissions, authenticated media routes, off-site backups with 30 daily copies retained, and git-ignored deployment secrets.
Subprocessors And Transfers
The current external providers are Resend and Cloudflare. Some provider processing may involve infrastructure outside the United Kingdom. Where safeguards are required, Wiizard Software will rely on provider safeguards or agree further arrangements where needed.
Return, Deletion, And Backups
At the end of the service, Wiizard Software will return, export, delete, or retain data according to lawful instructions and agreed offboarding terms. Deleted data may remain in backups until the normal backup retention period has passed.
Contact
Malachi Jack Burnett trading as Wiizard Software
Email: [email protected]
Website: wiizardsoftware.uk