Data Processing Agreement

This Data Processing Agreement (DPA) governs MarketStand's processing of personal data on behalf of customers subject to the GDPR, UK GDPR, or comparable data-protection laws. It supplements our terms of service and privacy policy.

The customer is the controller of any personal data submitted to MarketStand. MarketStand is the processor, and acts only on documented instructions from the customer.

Our current subprocessor list is published on our security page. We notify customers in advance of changes and offer a reasonable opportunity to object.

Where personal data is transferred out of the EEA or UK, MarketStand relies on the EU Standard Contractual Clauses (and the UK Addendum) as the transfer mechanism, with additional safeguards where required.

To countersign a copy for your records, email legal@marketstand.com with your account email and we'll send a PDF.