Kadraa

Question

How is GDPR and our data handled with an overseas consultant?

Every Kadraa consultant is bound by data protection clauses in their consultant agreement, signs a separate international data transfer agreement governing how they handle your data, and completes GDPR training through an online portal. Those obligations are mirrored in the service level agreement you hold with us, so the chain is documented end to end.

The contractual layer

Data obligations sit in three places at once. The consultant agreement between Kadraa and the individual carries comprehensive clauses on handling client data. A separate international data transfer agreement governs the transfer itself, which is the mechanism UK GDPR expects when data moves outside the UK. The service level agreement between Kadraa and you reflects the same obligations, so what you are promised and what the consultant is bound by are consistent.

South Africa also has its own comprehensive data protection law, POPIA, which applies to the consultant independently of anything we put in a contract.

The training layer

Every consultant completes standard GDPR training through an online portal. This is not a box-ticking clause in a contract they never read; it is delivered training on what the rules actually require of them day to day.

Your side of it, honestly

A large part of practical data security is in your hands, and it would be misleading to suggest otherwise. You can supply and prepare equipment for the consultant. You control access to your systems and servers, and the same safeguards you apply to any remote member of staff apply here: access controls, device policy, whatever your standard is.

The contractual and training layers make the consultant's duties clear and enforceable. The operational layer works the way it does for any remote employee, and that part belongs to you. If you have a DPO or an adviser, they are welcome to review the terms.

The next 30 minutes

Bring a role. Leave with its price.

Tell us what the role would pay in the UK and we’ll give you an indicative monthly fee on the call. Typical time from brief to signed contract is 21 days. And if the model doesn’t fit what you need, we’ll say so on the call.

  • 30 minutes, with a founder
  • An indicative monthly figure for your role, on the call
  • No obligation, no follow-up sequence