Legal
Data Processing and Security
This page describes our approach to data-processing arrangements for client engagements. It is a summary, not a contract.
Effective from 1 August 2026
Roles
In most client engagements the client determines why and how personal information is processed, and Outsourcebar acts on the client's documented instructions.
Contractual documentation
- Mutual non-disclosure agreement
- Proposal or statement of work
- Data-processing agreement where personal information is involved
- Access and security schedule
- Approved contractual transfer documentation where required
Cross-border access
Operational services may involve authorised access to client systems from India. Where UK or European personal information is accessed from India, an appropriate contractual transfer mechanism is agreed with the client before access is granted.
We do not claim that a specific transfer arrangement has been completed unless the relevant documents have actually been executed for your engagement.
Operational controls
- Role-based, least-privilege access
- Multi-factor authentication where supported by the client system
- Confidentiality obligations for all personnel
- Controlled document sharing and data minimisation
- Documented retention, deletion and access review
- Incident reporting and escalation procedures
Data-processing enquiries
Send data-processing questions to hello@outsourcebar.in, or use the 'Data Processing Enquiry' subject on our contact form.