Data processing addendum
Clear expectations for the people who use our software.
Effective 11 October 2026. Operated by UV Studios.
Who this is for
This page is for business customers. When UV Studios processes personal data on your behalf as part of a product or a custom software engagement, a data processing addendum (DPA) forms part of our agreement with you. It does not apply to ordinary website enquiries or to consumer products where UV Studios decides how data is used.
What our DPA covers
Our DPA sets out the subject matter, purpose and duration of the processing; the types of personal data and the people it relates to; and the instructions we follow. We process the data only on your documented instructions and tell you if we believe an instruction conflicts with the law.
Confidentiality and security
People who handle your data are bound by confidentiality. The security measures that apply to your engagement, such as access control, protection in transit and at rest, backup and incident handling, are described in an annex to the DPA.
Other processors
The DPA lists each subprocessor we use for your engagement, with its purpose and location. We tell you before adding or replacing one, and you may object on reasonable grounds.
Requests, incidents and audits
We help you respond to requests from individuals and regulators, notify you without undue delay if a personal data breach affects your data, and give you the information you reasonably need to confirm that we meet our obligations.
International transfers
If your data is transferred between countries, the DPA records the transfer and the legal mechanism that protects it.
When the service ends
At the end of the engagement we return or delete your data, as you choose, unless the law requires us to keep it.
Request a DPA
To request a DPA for your engagement, contact us through the contact form and tell us which product or project it relates to. The signed DPA, not this summary, is the binding document.