Data Processing Terms and Conditions

Our Data Processing Terms and Conditions (OC.DAT.PR.04) govern the processing of personal data by Original Consultants Ltd on behalf of our customers, in accordance with the UK GDPR. These terms incorporate the sub-processor arrangements detailed above.

Download: Data Processing Terms and Conditions (PDF)

Data Sub-Processors

Third-party data sub-processors engaged by Original Consultants Ltd in the delivery of our services.

Last updated: 19 February 2026
Version: 1.0
✓ ISO 42001
Overview

Original Consultants Ltd ("Original", "we", "us") is a Cisco Preferred Partner providing services in AI & Cloud, Collaboration, Networking, Security and Services. As part of delivering our services, we may engage third-party sub-processors to process personal data on behalf of our customers.

This page provides a current list of sub-processors we use, the nature of processing undertaken, and the safeguards in place. We maintain this list in accordance with our obligations under the UK GDPR, our Data Processing Terms and Conditions (OC.DAT.PR.04), and our ISO 42001 AI Management System certification.

We will update this page when we engage new sub-processors or make material changes to existing arrangements. Where our customer agreements require it, we will also provide direct notification of changes.

Current Data Sub-Processors
Anthropic
Anthropic PBC
Active
Processing Purpose
AI-assisted analysis, documentation and configuration review
Data Categories
Customer data including but not limited to technical configuration data, infrastructure details, and business information as required for the delivery of contracted services
Processing Location
United States
Transfer Mechanism
Standard Contractual Clauses (SCCs)
Data Retention
7 days (automatic deletion)
DPA in Place
Yes — incorporated via Commercial Terms
Anthropic provides AI services (Claude) used under commercial API terms. Data submitted via the API is encrypted in transit (TLS), is not used for model training, and is automatically deleted within 7 days. Anthropic's DPA includes Standard Contractual Clauses and a UK GDPR Addendum for international data transfers.
Your Rights

As a customer of Original Consultants Ltd, you have the right to:

  • Be informed of the sub-processors we engage in the delivery of services to you
  • Object to the appointment of a new sub-processor on reasonable data protection grounds
  • Request further details of the safeguards in place with any sub-processor
  • Request a copy of the relevant Data Processing Addendum
  • Be notified of material changes to this sub-processor list where required by your agreement with us
Notification of Changes

We will update this page when sub-processors are added, removed, or materially changed. Where our customer agreements require direct notification, we will provide at least 30 days' notice before engaging a new sub-processor, giving you the opportunity to review and raise any objections.

We recommend bookmarking this page or subscribing to updates. A version history is maintained below.

Version History
Version
1.0
Date
19 February 2026
Change
Initial publication — Anthropic PBC added as sub-processor
Contact

If you have questions about our sub-processors or wish to exercise any of your rights, please contact us:

Original Consultants Ltd
Data Protection Enquiries
support@original.org.uk