This Data Processing Addendum (“DPA”) forms part of the Terms of Service between you (the customer, as controller) and [Company name — set LEGAL_ENTITY_NAME] (as processor) whenever LinkHunter processes personal data on your behalf. It is designed to meet Article 28 of the UK GDPR and EU GDPR.
1. Scope and roles
You determine the purposes and means of processing customer data in your workspace; we process it only to provide LinkHunter to you. Where you use LinkHunter on behalf of your own clients, you act as processor and we act as your sub-processor.
2. Details of processing
| Subject matter | Providing the LinkHunter link-building platform |
|---|---|
| Duration | The term of your subscription plus the deletion period below |
| Nature and purpose | Storage, analysis, enrichment, transmission of outreach email through your mailbox, reply processing and link monitoring, as configured by you |
| Data subjects | Website owners, editors and publishers you contact; your users and team members |
| Personal data | Names, job titles, business email addresses, source URLs, email content and replies, negotiation notes |
| Special categories | None intended; you agree not to upload them |
3. Our obligations
- Process personal data only on your documented instructions (these terms and your use of the product), and tell you if we think an instruction breaks data protection law.
- Ensure everyone with access is bound by confidentiality.
- Apply the technical and organisational measures described on our Security page.
- Assist you, taking into account the nature of processing, with data-subject requests, security, breach notification, impact assessments and consultations with authorities.
- Notify you without undue delay, and where feasible within 48 hours, after becoming aware of a personal-data breach affecting your data.
- At the end of the service, delete your data (or return it via export) within 30 days, unless the law requires us to keep it. Backups roll off on their normal cycle.
- Make available the information needed to demonstrate compliance and allow for reasonable audits, primarily through documentation and security questionnaires.
4. Sub-processors
You give general authorisation for the sub-processors listed in our Privacy Policy. Providers that you connect yourself with your own account (AI models, search and data providers, your mailbox) are engaged by you. We will give at least 30 days’ notice of a new sub-processor engaged by us, and you may object on reasonable data-protection grounds. We impose data-protection obligations on our sub-processors that are no less protective than this DPA.
5. International transfers
Transfers outside the UK/EEA rely on adequacy decisions or on the Standard Contractual Clauses (Module 2 or 3 as applicable) and the UK International Data Transfer Addendum, which are incorporated by reference when needed.
6. Your obligations
You confirm you have a lawful basis for the personal data you process with LinkHunter, that you will provide the information data subjects are entitled to, and that you will follow our Anti-Spam & Outreach Policy.
7. Contact
Privacy: support@linkhunter.cc · Security incidents: support@linkhunter.cc