Compliance
Data Processing Agreement.
Last updated: 20 June 2026 · DPA v1.0 (current)
Every school that uses Class Prayer with pupils signs a Data Processing Agreement (DPA) with us. Our DPA covers every requirement of UK GDPR Article 28, including:
- Subject matter, duration, nature and purpose of processing.
- Documented-instructions-only clause.
- Confidentiality obligations on our personnel.
- Technical and organisational security measures (see /security).
- Sub-processor list, flow-down clauses, and 30-day change-notice procedure (see /subprocessors).
- Assistance with data-subject rights, breach notification and DPIA.
- Return or deletion of personal data on termination.
- Audit and information rights.
How to get a copy
School DPOs and procurement officers can request the signable PDF and Word versions by emailing info@classprayer.app with the subject line "DPA request - [school name]". We respond within 5 working days.
Related documents
Each of the documents below is published in full on this site and is included in the one-click DPO Bundle PDF above.
- Data Protection Impact Assessment (DPIA)
- Retention schedule
- Personal Data Breach procedure
- Subject Access Request procedure
- Legitimate Interests Assessments
- Children's Code (AADC) self-assessment
- ICO Data Protection Registration Certificate (PDF) — Class Prayer Ltd, ICO Reference ZC185207, registered 29 June 2026.
For anything not listed here, email info@classprayer.app.