Data processing addendum

This is version 2.0 of data processing addendum. The version that governs a signed engagement is the one in force on the day it was signed, and every acceptance is recorded against its exact text.

In this document "Nuub" means Nuub Limited (company number 12345678), registered office The Future Works, 2 Brunel Way, Slough, SL1 1FQ, United Kingdom, trading as Nuub.

Contractual notices go to admin@nuub.co.uk. Data protection requests go to admin@nuub.co.uk. Nuub's ICO registration is being processed; contact the privacy address above for the current position.

These are business-to-business terms, governed by the law of England and Wales. If you are buying wholly or mainly outside a trade, business, craft or profession, contact Nuub before purchasing, because different rights apply.

This addendum applies where Nuub processes personal data solely on the client's documented instructions. Where each party decides its own purposes, each acts as an independent controller and this addendum does not apply.

It forms part of the client terms of engagement and does not vary them in any other respect.

Subject matter: delivery of the contracted services. Duration: the engagement, plus the retention period in the privacy notice. Nature and purpose: hosting, analysis, reporting and support. Types of data and categories of data subject: as determined by the client's own material and briefing.

Process only on documented instructions; keep personnel under confidentiality; apply appropriate technical and organisational measures; assist with data subject requests, security, breach notification and impact assessments; and delete or return personal data at the end of the engagement except where retention is legally required.

Notify the client without undue delay after becoming aware of a personal data breach affecting the client's data.

Make available the information reasonably needed to demonstrate compliance and allow audits on reasonable notice, no more than once a year unless required by a regulator.

The client authorises the sub-processors listed in the privacy notice. Nuub gives notice before adding a sub-processor and the client may object on reasonable data protection grounds.

Transfers outside the UK are made under adequacy regulations or the UK international data transfer agreement or addendum.

Where an AI service is used to process client personal data, it is used under contractual restrictions that prohibit training on that data, and only in accordance with Nuub's approved data protection arrangements.

• Client terms of engagement — The master terms governing every diagnostic, review, blueprint, sprint and programme bought from Nuub.
• Executive network agreement — The terms on which an executive joins the Nuub bench, delivers work and is paid a share of billings.
• Fractional appointment terms — Additional terms for ongoing COO, CFO, NED and Chair appointments placed and administered by Nuub.
• Platform terms of use — How the Nuub platform, workspace, assessments and AI features may be used by clients and executives.
• Expenses and travel policy — What can be claimed, how it is approved, and why Nuub takes no share of expenses.
• Booking and session terms — How a paid session is booked, rescheduled, cancelled and credited, and what happens if either side does not turn up.
• Constraint assessment terms and disclaimer — The basis on which the constraint assessment, its scores and its cost-of-constraint estimates are provided.
• Growth partnership and retainer schedule — The additional terms that apply to a recurring monthly partnership: term, notice, what is included and what happens to unused capacity.
• Referral programme terms — How a referral is registered, when a reward becomes payable, and what disqualifies a referral.
• Privacy notice — What personal data Nuub holds, why, on what lawful basis, who it is shared with, how long it is kept and what rights apply.
• Cookie notice — What is stored on your device, why, and how to control it.
• Mutual non-disclosure agreement — Standard mutual confidentiality terms for exploratory conversations before an engagement is contracted.
• Nuub Pulse subscription terms — The terms for the Nuub Pulse monthly business subscription: what is included, what is explicitly not included, renewal and cancellation, what happens if a payment fails, and how your information is treated.
• Accessibility statement — The accessibility standard Nuub works towards, what is known to fall short, and how to report a problem.