Data Processing Addendum
The processor terms that apply to your customers' data.
Effective 15 September 2026
Roles
You are the controller of the personal data of your customers that you submit to Loops (names, email addresses, references, answers, feedback). 【Company legal name】 is your processor and processes that data only on your documented instructions, which are the settings and actions you take in the Service and these terms.
Our obligations as processor
We process the data only to provide the Service; keep it confidential and make sure our staff are bound by confidentiality; apply appropriate technical and organisational security measures; help you respond to data subject requests and meet your own obligations; tell you without undue delay of a personal data breach affecting your data; delete or return the data when the contract ends, subject to legal retention duties; and make available the information needed to show compliance and allow audits by you or an auditor you appoint, at reasonable intervals and with reasonable notice.
Subprocessors
You authorise the subprocessors listed on our Subprocessors page. We will give at least 14 days' notice by email before adding or replacing one, and you may object on reasonable data protection grounds; if we cannot resolve the objection you may cancel the affected business without penalty.
Transfers
Transfers outside the EEA rely on the EU Standard Contractual Clauses or an adequacy decision.
Duration and deletion
This addendum applies for as long as we process your customers' data. Data is deleted as described in the Privacy Policy when you delete a business or your account.