DATA PROCESSING AGREEMENT

Last updated: 15th October 2025

This Data Processing Agreement (“DPA”) forms part of the Terms of Use between you (“the User”) and WellKin Estates Ltd.
1. Roles

• Data Controller: You (the user/investor).

• Data Processor: WellKin Estates Ltd.

2. Processing Purpose
We process personal data to manage enquiries, send updates, and facilitate investment communications.

3. Security Measures
We maintain appropriate technical and organisational measures to protect data against unauthorised access or loss.

4. Sub-Processors
We may use third-party providers (e.g. Bubble, Mailchimp, Hostinger) subject to GDPR-compliant agreements.

5. Data Retention
Data is retained only as long as necessary to fulfil its purpose or as required by law.

6. Data Subject Rights
Users retain the right to access, rectify, or delete their data upon request.