Data Processing Addendum

You are the Controller of personal data you upload or generate via GetLinkPunch. GetLinkPunch is the Processor and processes that data only on your documented instructions.

Processing is limited to operating the GetLinkPunch service for the duration of your subscription, plus a 30-day retention window after termination.

We use a short list of infrastructure sub-processors (cloud hosting, database, error monitoring, email delivery). A current list is available on request to hello@getlinkpunch.com. We give 30 days' notice before adding new sub-processors.

Personal data may be transferred outside the EEA / UK using EU Standard Contractual Clauses (2021/914) and the UK International Data Transfer Addendum where applicable.

We maintain industry-standard technical and organizational measures (encryption in transit and at rest, access controls, audit logging) and will notify you within 72 hours of confirming a personal data breach affecting your account.

We assist you in responding to access, deletion, and portability requests at no additional cost.

Questions? Email hello@getlinkpunch.com.