Data Processing Agreement.

Every school that uses Class Prayer with pupils signs a Data Processing Agreement (DPA) with us. Our DPA covers every requirement of UK GDPR Article 28, including:

• Subject matter, duration, nature and purpose of processing.
• Documented-instructions-only clause.
• Confidentiality obligations on our personnel.
• Technical and organisational security measures (see /security).
• Sub-processor list, flow-down clauses, and 30-day change-notice procedure (see /subprocessors).
• Assistance with data-subject rights, breach notification and DPIA.
• Return or deletion of personal data on termination.
• Audit and information rights.

How to get and return your agreement

1. Complete the form below with your school or trust details. Your tailored agreement downloads straight away, with a unique reference.
2. Have your authorised signatory sign it.
3. Upload the signed PDF at classprayer.app/dpa/return. Uploading is the only way to return a signed agreement.
4. We confirm it and email you. Your schools are then recorded as covered, and you receive notice of any future policy or sub-processor change.

Related documents

Each of the documents below is published in full on this site and is included in the one-click DPO Bundle PDF.

• Data Protection Impact Assessment (DPIA)
• Retention schedule
• AI & hosting attestations
• Personal Data Breach procedure
• Subject Access Request procedure
• Legitimate Interests Assessments
• Children's Code (AADC) self-assessment
• ICO Data Protection Registration Certificate (PDF) — Class Prayer Ltd, ICO Reference ZC185207, registered 29 June 2026.

For anything not listed here, email info@classprayer.app.