Legal
Data Processing Agreement
Summary of the processor terms SIMSIM offers under GDPR, UK GDPR and other data protection laws.
Last updated: 2026-09-30
Template for review. Replace bracketed details and have qualified counsel review this document for each jurisdiction before launch.
Scope
This DPA applies when SIMSIM processes personal data, including biometric data, on a customer's behalf. It supplements the Terms. Request a countersigned copy at legal@sim-sim.io.
Our commitments
- Process only on documented instructions.
- Confidentiality obligations for all personnel with access.
- Appropriate technical and organisational security measures.
- Sub-processors only under written terms, with notice of changes and a right to object.
- Assistance with data-subject requests, DPIAs and prior consultations.
- Breach notification without undue delay.
- Deletion or return of data at the end of the service.
- Information and audit rights proportionate to the risk.
International transfers
EU Standard Contractual Clauses, the UK Addendum and other mechanisms as required.
Regional addenda
The DPA includes terms for CCPA/CPRA service providers, PIPEDA, the Australian Privacy Act and India's DPDP Act.