Effective Date: January 10, 2024
Last Updated: August 10, 2025
This Data Processing Addendum (“Addendum”) forms part of the Terms of Service (“Agreement”) between:
- LeadSpheres (“Processor”, “we”, “our”, “us”)
- And Customer (“Controller”, “you”, “your”)
regarding the processing of personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and any applicable data protection laws.
1. Definitions
For the purpose of this Addendum:
- “Personal Data”: Any information relating to an identified or identifiable natural person.
- “Processing”: Any operation performed on Personal Data, whether automated or manual, such as collection, storage, transmission, or deletion.
- “Controller”: The party determining the purposes and means of Personal Data processing (the Customer).
- “Processor”: The party processing Personal Data on behalf of the Controller (LeadSpheres).
- “Sub-processor”: Any third party engaged by LeadSpheres to process Personal Data.
- “Data Subject”: The individual whose Personal Data is processed.
- “Applicable Law”: GDPR and any other relevant data protection legislation.
2. Roles of the Parties
- Controller Responsibilities:
- You are responsible for ensuring that the collection and submission of Personal Data to LeadSpheres comply with GDPR.
- You must obtain all required consents from data subjects before providing their data to us.
- Processor Responsibilities:
- LeadSpheres will only process Personal Data on your instructions and solely for providing our products and services.
- We will not use Personal Data for marketing, profiling, or any purpose other than fulfilling the Agreement.
3. Nature, Purpose & Duration of Processing
- Nature of Processing: Hosting, storing, transmitting, and managing website and customer data.
- Purpose: To provide LeadSpheres’ services, including CRM, drag-and-drop website builder, commerce, automation, and other related SaaS features.
- Duration: For the duration of your active account and as required to comply with legal obligations.
4. Prohibited Industries
LeadSpheres does not allow businesses in certain industries to use our platform.
Restricted industries include:
- Insurance and banking services
- Adult entertainment and related content
- Gambling and betting platforms
- Alcohol-related businesses
LeadSpheres reserves the right to suspend or terminate any account without prior notice if it engages in prohibited activities or violates this Addendum.
5. Data Security
LeadSpheres implements appropriate technical and organizational measures to ensure the security and integrity of Personal Data, including:
- Encryption of data at rest and in transit
- Access controls and authentication mechanisms
- Regular security audits and vulnerability testing
- Secure data backups and disaster recovery planning
6. Sub-processing
- LeadSpheres may engage trusted Sub-processors (e.g., hosting providers, email services) to deliver its services.
- We maintain a current list of Sub-processors, available upon request.
- Sub-processors are bound by data protection obligations no less strict than those set out in this Addendum.
7. International Data Transfers
- LeadSpheres may process and transfer Personal Data outside the European Economic Area (EEA), provided that appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
8. Data Subject Rights
LeadSpheres will assist you in fulfilling data subject rights under GDPR, including:
- Right of access
- Right to rectification
- Right to erasure (“Right to be forgotten”)
- Right to data portability
- Right to object to processing
We will respond promptly to your requests related to data subject inquiries.
9. Data Breach Notification
In the event of a Personal Data Breach, LeadSpheres will:
- Notify you without undue delay after becoming aware of the breach.
- Provide relevant information to help you comply with your own breach notification obligations under GDPR.
10. Data Retention & Deletion
- LeadSpheres retains Personal Data only for as long as necessary to fulfill the Agreement.
- Upon termination of your account, all Personal Data will be deleted or anonymized within 30 days, unless required by law to retain it.
11. Audit & Compliance
- Upon reasonable request, LeadSpheres will provide documentation to demonstrate GDPR compliance.
- You may conduct audits or inspections once per year, provided they do not disrupt our business operations.
12. Termination
- This Addendum remains effective as long as LeadSpheres processes Personal Data on your behalf.
- Upon termination, all Personal Data will be securely deleted or returned, except where retention is required by law.
13. Contact Information
If you have any questions or concerns regarding this Addendum, please contact us at:
LeadSpheres
📧 Email: [email protected]
🌐 Website: https://leadspheres.com
14. Signatures
By accepting the Terms of Service or using LeadSpheres, you agree to this Data Processing Addendum.
| Controller | Processor (LeadSpheres) |
|---|---|
| Name: | LeadSpheres |
| Signature: | Ahmad |
| Date: | January 10, 2024 |