DPA and subprocessors
Effective and last updated
Data processing agreement
When we process personal information on a client's behalf, for example a target account list, a suppression list or leads generated for them, we act as a processor or service provider. Our data processing agreement covers:
- UK GDPR and EU GDPR Article 28 terms, including instructions, confidentiality, security, assistance and audit
- CCPA/CPRA service provider and contractor terms, and equivalent terms under other US state laws
- PIPEDA and Quebec Law 25 obligations, including safeguards for transfers outside Quebec
- International transfer mechanisms: UK IDTA / Addendum and EU Standard Contractual Clauses
- Breach notification without undue delay, and deletion or return of data at the end of a program
- Security measures aligned to our ISO/IEC 27001 certification and SOC 2 Type II controls
Clients can request a pre-signed copy by emailing privacy@bootsoc.com.
Subprocessors
| Company | Purpose | Location |
|---|---|---|
| Vercel Inc. | Website hosting, edge network and privacy-friendly analytics | United States |
| Neon (Databricks, Inc.) | Database hosting for enquiries, consent and privacy request records | United States |
| Sanity AS | Content management for website articles and job listings | EU / United States |
| Google LLC | Workspace email and, with consent, Google Analytics | United States |
| LinkedIn Corporation | Campaign measurement via Insight Tag, with consent | United States |
| Cloudflare, Inc. | Bot protection (Turnstile) and DNS | United States |
We give clients at least 30 days' notice of new subprocessors that handle client personal data. To subscribe to updates, email privacy@bootsoc.com.
Related policies
See our privacy policy, email and outreach policy and data and trust center.
Questions about this page? Email privacy@bootsoc.com or write to BootSoc Media LLC, 5830 East 2nd Street, Ste 7000 #29910, Casper, WY 82609, USA.