Data processing

Data Processing Addendum

Last updated 14 June 2026Governing law: England & WalesController: LaunchLane Limited (in formation), England & Wales

When you process personal data inside your LaunchLane workspace, you are the controller and we are your processor. This DPA describes that arrangement under UK GDPR Article 28.

1. Scope and roles

This DPA applies between you (“Controller”) and LaunchLane Limited (“Processor”) and forms part of the Terms of Service. We process personal data only on your documented instructions, including the configuration you choose in the Service.

2. Processing particulars

Subject matterProvision of the LaunchLane workspace.
DurationFor the term of your subscription plus deletion period.
Nature & purposeHosting, storing, displaying and processing Customer Content to deliver the Service.
Categories of dataIdentification data (name, email), workspace content you create, usage telemetry.
Categories of data subjectsYour team members, invitees, and individuals you choose to reference in workspace content.

3. Our obligations as Processor

  • Process personal data only on your documented instructions.
  • Ensure personnel are bound by confidentiality.
  • Implement appropriate technical and organisational measures (see Security page).
  • Use subprocessors only under written terms equivalent to this DPA — see Subprocessors page.
  • Assist you with data subject requests, DPIAs, and regulator engagement.
  • Notify you of a personal data breach without undue delay, and in any event within 72 hours of awareness.
  • On termination, delete or return personal data within 30 days unless retention is required by law.

4. International transfers

Where we transfer personal data outside the UK, we rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, supported by a Transfer Impact Assessment.

5. Audit

We provide independent assurance via summaries of security audits and certifications. Where you reasonably require additional audit information, we'll co-operate to provide it under NDA and at your cost, no more than once per year.

6. Subprocessors

The current list is on the Subprocessors page. We give 14 days' notice of additions; you may object on reasonable data-protection grounds.

7. Liability

Liability under this DPA is subject to the limitations in the Terms of Service.

8. Contact

DPA queries: legal@launchlane.uk.