Data Processing Agreement
Schedule of Processing
IMSM Ltd – Sub-processor and Data Handling Schedule
Document ID: IMSM-SOP-002
Current version: v 2.0
Effective from: 1 Oct 2025
Last updated: 26 Jan 2026
Last saved: 26 Jan 2026
Checksum: a7c3d91feb
| Processing description | The controller may engage IMSM for any or all the following services: Consultancy, Auditing and the delivery of training |
| Processing purpose | To fulfil the contract |
| Processing duration | Duration of the contract and in line with data retention |
| Categories of personal data | Name, work email address, phone number. *If the customer has agreed to be recorded video footage of the discussion and its content to be stored, this could include all categories of data. |
| Categories of data subjects | Customer and customers employees |
List of authorised subsequent processors
| # | Name | Address | Country | Processing carried out |
|---|---|---|---|---|
| 1 | Worknest | Woodhouse, Church Lane, Aldford, Chester, CH3 6JD | UK | O365, Azure (UK based) IT Services |
| 2 | Innov8 | 5 Riverview, The Embankment Business Park, Heaton Mersey, Stockport, SK4 3GN | UK | Sage CRM Support |
| 3 | Corestream Ltd | 20 Grosvenor Place, London, SW1X 7HN | UK | IMSMLoop Support |
| 4 | Eureka Solutions Ltd | 14 Broom Road East, Newton Mearns, Glasgow, G77 5SD | UK | Sage 200 Support |
| 5 | HubSpot | 199 Bishopsgate, London, EC2M 3TY | UK | CRM |
| 6 | Cloudtalk AI* | 5 Merchant Square, London, W2 1AY | UK | Conference call recordings |
*Where applicable based on customer consent for call recording.