StopBouncingLegal
Data Processing Agreement
When you upload email lists to StopBouncing, we act as your data processor under GDPR. Here is what that means in practice — and how to get a signed DPA if you need one.
Our processor commitments
These commitments apply to all customers. A signed DPA formalises them for customers who require it for their own compliance documentation.
Processing only on your instructions
We process the email addresses in your uploaded lists solely to return verification results. We do not use your data for any other purpose.
Confidentiality
All staff and contractors with access to processing systems are bound by confidentiality obligations.
Security measures
We implement appropriate technical and organisational measures including encryption in transit (TLS), hashed credentials, access controls, and server-side session management.
Sub-processors
We use a limited number of sub-processors (email delivery, payment processing, verification infrastructure). We impose equivalent data protection obligations on them and will notify you of any changes.
Data deletion
Uploaded email lists are permanently deleted within 48 hours of job completion. Verification results are purged after 7 days. On termination of our relationship, we will delete all personal data within 30 days on request.
Data subject rights
We will assist you in responding to requests from individuals exercising their rights under GDPR (access, erasure, portability, etc.) within the timeframes required by law.
Breach notification
In the event of a personal data breach affecting your data, we will notify you without undue delay and no later than 72 hours after becoming aware, providing all information necessary to meet your reporting obligations.
Audit rights
On request, we will provide information necessary to demonstrate compliance with our processor obligations, including documentation of the measures described above.
Need a signed DPA?
If your organisation requires a countersigned Data Processing Agreement for GDPR compliance, contact us and we will send you our standard agreement within one business day.
Request a DPAQuestions about data handling?
For questions about how we handle personal data, our sub-processors, or your rights under GDPR, reach out directly — we respond to every message.
support@stopbouncing.comSee also our Privacy Policy and Terms of Service.