Data Processing Agreement

Last updated · May 8, 2026

What this page is

When SkyTrado processes personal data on your organisation’s behalf — for example, traveller information that flows through the booking engine — you are the data controller and we are the data processor. A Data Processing Agreement (DPA) sets out the obligations each side has under data-protection laws such as the EU/UK GDPR and India’s Digital Personal Data Protection Act, 2023.

This page summarises the terms we work to. The full, signable DPA is available on request — see Request a DPA below.

Roles and scope

• You — the SkyTrado customer — act as controller for the personal data you push into the platform (your travellers, your agents, your end users).
• Skytrado Pvt. Ltd. acts as processor, handling that data only on your documented instructions and only for the purposes set out in our service agreement.
• Where Skytrado handles personal data for our own purposes — for example, contact information for our own sales prospects collected through this website — we act as a controller. Those practices are covered in our Privacy Policy.

What we commit to

Under our standard DPA we commit to:

• process customer personal data only on the customer’s documented instructions;
• require staff with access to personal data to be bound by confidentiality obligations;
• maintain reasonable technical and organisational measures (encryption in transit and at rest, role-based access, access logging, vulnerability management);
• engage subprocessors only under written contracts that impose equivalent data-protection obligations, and notify customers of changes to the subprocessor list;
• assist customers with data-subject requests, security-incident notifications, and DPIAs;
• delete or return customer personal data on termination of the service, subject to any legal retention obligations;
• support international transfers using standard contractual clauses or equivalent safeguards where required.

Subprocessors

The website itself relies on the following subprocessors. Subprocessors used inside the SkyTrado platform are listed in the signed DPA and notified separately to customers under contract.

• Vercel Inc. — static-website hosting and edge delivery. Vercel DPA.
• Form-Backend, Inc. (FormSubmit) — receives and forwards demo-request form submissions.
• Zoho Corporation — hosts the contact@skytrado.com mailbox.
• Google LLC — serves Google Fonts and the optional Google Maps embed on the contact page. Google Cloud DPA.

Request a DPA

To put a signed DPA in place ahead of an enterprise rollout:

1. Email contact@skytrado.com with the subject line “DPA request”.
2. Tell us the legal entity that will be the customer, the SkyTrado modules you plan to use, and any specific clauses your procurement team requires.
3. We will send back our standard DPA template within five business days. If you would prefer to use your own DPA paper, we are happy to review it.

Updates

We update this page when our subprocessor list or commitments change. Customers under contract receive direct notice of material subprocessor changes per their DPA.