Data Processing Addendum
When you process personal data inside your LaunchLane workspace, you are the controller and we are your processor. This DPA describes that arrangement under UK GDPR Article 28.
1. Scope and roles
This DPA applies between you (“Controller”) and LaunchLane Limited (“Processor”) and forms part of the Terms of Service. We process personal data only on your documented instructions, including the configuration you choose in the Service.
2. Processing particulars
| Subject matter | Provision of the LaunchLane workspace. |
| Duration | For the term of your subscription plus deletion period. |
| Nature & purpose | Hosting, storing, displaying and processing Customer Content to deliver the Service. |
| Categories of data | Identification data (name, email), workspace content you create, usage telemetry. |
| Categories of data subjects | Your team members, invitees, and individuals you choose to reference in workspace content. |
3. Our obligations as Processor
- Process personal data only on your documented instructions.
- Ensure personnel are bound by confidentiality.
- Implement appropriate technical and organisational measures (see Security page).
- Use subprocessors only under written terms equivalent to this DPA — see Subprocessors page.
- Assist you with data subject requests, DPIAs, and regulator engagement.
- Notify you of a personal data breach without undue delay, and in any event within 72 hours of awareness.
- On termination, delete or return personal data within 30 days unless retention is required by law.
4. International transfers
Where we transfer personal data outside the UK, we rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, supported by a Transfer Impact Assessment.
5. Audit
We provide independent assurance via summaries of security audits and certifications. Where you reasonably require additional audit information, we'll co-operate to provide it under NDA and at your cost, no more than once per year.
6. Subprocessors
The current list is on the Subprocessors page. We give 14 days' notice of additions; you may object on reasonable data-protection grounds.
7. Liability
Liability under this DPA is subject to the limitations in the Terms of Service.
8. Contact
DPA queries: legal@launchlane.uk.