bouncyboobs

Last updated · 16 April 2026

Data Processing Agreement

This DPA forms part of the agreement between you (the controller) and bouncyboobs (the processor) when you upload personal data for verification. It aligns with the EU Commission’s 2021 Standard Contractual Clauses (controller–processor, Module 2).

Subject matter and duration

Verification of email addresses for the duration of your subscription.

Nature and purpose

Five-layer email deliverability checks (syntax, DNS, disposable/role, SMTP probe, optional signal layer) initiated by the controller.

Personal data and data subjects

Email addresses (and any other columns the controller chooses to upload) belonging to the controller’s contacts.

Controller obligations

The controller warrants a lawful basis for processing each email address it submits and accepts responsibility for the accuracy, legality, and proportionality of the upload.

Processor obligations

  • Process personal data only on documented instructions from the controller.
  • Ensure personnel are bound by confidentiality.
  • Implement appropriate technical and organisational security measures, including encryption in transit and at rest, least- privilege access, and incident response procedures.
  • Engage subprocessors only with the controller’s prior general authorisation, with at least 30 days advance notice of additions or changes (see /subprocessors).
  • Assist the controller in fulfilling data subject rights requests.
  • Notify the controller of any personal data breach without undue delay, in any case within 72 hours of becoming aware of it.
  • Delete or return all personal data at the end of the agreement, at the controller’s choice.
  • Provide the information necessary to demonstrate compliance and allow for audits within reason.

International transfers

Where personal data is transferred outside the UK or EEA, transfers rely on UK IDTA / SCCs and/or the EU–US DPF as applicable.

Signing

For now this DPA applies on a click-through basis when you accept the Terms of Service. A countersigned version is available on request to legal@bouncyboobs.dev.