Data Processing Addendum
How Numina House handles client data when acting as a processor. Last updated 2026.
Roles
When Numina House (operating name of 9566-0866 Québec inc.) processes personal data on behalf of a client, the client is the data controller and Numina House acts as a data processor, processing data only on the client’s documented instructions.
Scope & purpose
We process personal data only as needed to provide the agreed services, and only for the duration of the engagement.
Our obligations
We apply appropriate technical and organisational security measures, ensure that people authorised to process data are bound by confidentiality, and assist the client with data-subject requests and its own compliance obligations.
Sub-processors
Where we engage sub-processors, they are bound by data-protection terms equivalent to these, and we remain responsible for their performance.
Security & breach
We maintain reasonable safeguards and will notify the client without undue delay upon becoming aware of a personal-data breach affecting their data.
Return or deletion
On termination, we return or delete the client’s personal data at the client’s choice, except where retention is required by law.
Put a DPA in place
To execute a signed Data Processing Addendum for an engagement, email hello@numinahouse.com.