Clause 9 of our T&Cs cover the obligations in relation to data protection that are required pursuant to GDPR and the DPA 2018.  Appendix 1 sets out the scope, nature and purpose of processing by Fixflo, the duration of the processing and the types of personal data and categories of data subject.