Data Processing Addendum
Last updated: April 8, 2026
If your organization needs a signed Data Processing Addendum (DPA), a privacy questionnaire response, transfer language, or supporting security and privacy documentation, you can request it from LeadSwitchboard here.
1. When a DPA Applies
A DPA is generally relevant where your organization uses LeadSwitchboard to process personal data of leads, customers, or other business contacts on your behalf. In those circumstances, your organization typically acts as the controller and LeadSwitchboard acts as the processor for the data you upload, route, or otherwise manage through the Service.
Our Privacy Policy describes the controller and processor roles we expect to apply in more detail.
2. What You Can Request
- A signed Data Processing Addendum (DPA) under UK GDPR / EU GDPR Article 28
- Transfer language incorporating the UK International Data Transfer Agreement, the UK Addendum, or the EU Standard Contractual Clauses where applicable
- Privacy or vendor security questionnaire responses
- Subprocessor list or change-notification commitments
- Supporting security, confidentiality, or due-diligence materials
3. How to Submit a DPA Request
Email support@leadswitchboard.io with the subject line "DPA Request".
To help us route the request quickly, include:
- Your company name and the contracting legal entity
- A primary contact name, role, and email address
- The specific documentation you need (signed DPA, questionnaire, transfer language, etc.)
- Any applicable deadline or procurement window
- Whether your request relates to an existing LeadSwitchboard account or a prospective one
4. Our Current Approach
We continue to strengthen our privacy and vendor management program. We aim to support reasonable requests for controller-processor terms, international transfer safeguards, and related documentation consistent with the Services we provide.
Where a signed DPA is in place, it governs the processing of personal data carried out under your agreement with us and takes precedence over inconsistent terms elsewhere in our Terms of Service for that processing.
5. Related Resources
- Subprocessors & International Transfers — the current list of service providers that may process personal data on our behalf.
- Privacy Requests — how individuals submit data subject rights requests (access, deletion, correction, portability, objection, restriction, or withdrawal of consent).
- Privacy Policy — how we handle personal data under UK GDPR, EU GDPR, and related laws.
- Terms of Service — the baseline terms that govern use of the Service.
6. Contact
For DPA, security, or privacy documentation requests: