They will only process your personal data on our instructions and they are subject to a duty of confidentiality