Data Processing — Summary

Version 2026-05-01

This page summarises the data processing relationship between Social Justice Innovation Hub CIC (UK Community Interest Company — incorporation pending)("Hub") and tenant organisations using Equitas. A full Data Processing Agreement is available on request from amidutom@yahoo.com.

Roles

Tenant — controller for beneficiary records they enter.
Hub — processor for those records, and joint controller where the Hub aggregates outcomes for cross-tenant reporting.

Subject matter & duration

Provision of the Equitas outcomes platform for the duration of the tenant's subscription.

Nature & purpose

Hosting, storage, retrieval, audit, reporting and self-service export of personal data described in our Privacy Policy.

Categories of data subjects

Tenant staff users
Beneficiaries / participants
Funders, commissioners and observers

Categories of personal data

Identification, contact, demographic, education/employment, outcome and audit data; special category data where lawful (see Privacy Policy §4).

Sub-processors

Cloud database & storage (UK/EU)
Authentication provider
Transactional email
Payments (where enabled)

An up-to-date list is available on request. We give 30 days' notice of new sub-processors.

Security measures

TLS in transit; encryption at rest; Row-Level Security; least-privilege roles; MFA for elevated roles; full audit logs; backup and disaster-recovery procedures; staff training.

Sub-processor breach

We notify the tenant without undue delay and within 72 hours of becoming aware.

Return / deletion

On termination, tenant data is exported on request and then deleted per the agreed retention schedule.