Please Wait...
Last updated: 27 July 2026
This Data Processing Agreement ("DPA") forms part of the agreement between SPRL ("Processor", "we", "our", or "us") and the business or enterprise customer ("Controller", "you", or "your") using SPRL products or services that involve the processing of personal data.
This DPA establishes the terms under which SPRL processes personal data on behalf of customers and describes the responsibilities of both parties regarding the collection, use, storage, disclosure, and protection of personal data in connection with SPRL Services.
This DPA should be read together with our Terms of Service, Privacy Policy, Security Policy, and other applicable SPRL policies.
This DPA applies where SPRL processes personal data on behalf of business or enterprise customers in connection with the provision of our products and services.
This may include, but is not limited to:
This DPA applies only to the extent that SPRL acts as a data processor or service provider on behalf of a customer under applicable data protection laws.
For the purposes of this DPA:
Nothing in this DPA changes the ownership of personal data or transfers responsibility for determining the lawful basis for processing from the Customer to SPRL.
The Customer is responsible for ensuring that:
When acting as a Processor, SPRL will:
The categories of personal data processed by SPRL depend on the products and services used by the Customer and the information submitted through those services.
Depending on the applicable service, personal data may include:
SPRL does not intentionally require customers to submit special categories of personal data unless expressly supported by the applicable service and permitted by law.
SPRL processes personal data solely for the purpose of providing, operating, securing, maintaining, supporting, and improving the Services requested by the Customer.
Processing activities may include:
SPRL implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction.
Our security programme is supported by administrative, physical, and technical safeguards appropriate to the nature of the Services and the risks associated with processing personal data.
Additional information regarding our security practices is available in the SPRL Security Policy.
SPRL ensures that personnel authorised to process personal data are subject to appropriate confidentiality obligations and receive access only where necessary to perform their authorised responsibilities.
Access to personal data is limited to individuals who require such access for the provision, maintenance, support, or security of SPRL Services.
SPRL may engage trusted third-party service providers ("Subprocessors") to support the delivery of certain products and services.
Examples of services that may involve Subprocessors include:
Where SPRL engages Subprocessors, we take reasonable steps to ensure that they are subject to appropriate contractual obligations relating to the protection of personal data consistent with applicable data protection laws.
Depending on the Services used and the location of our infrastructure or service providers, personal data may be processed or transferred to countries outside the Customer's jurisdiction.
Where required by applicable law, SPRL will implement appropriate safeguards intended to protect personal data during such transfers.
Customers are responsible for determining whether additional legal or regulatory requirements apply to their use of SPRL Services.
Where applicable under data protection laws, the Customer is responsible for responding to requests from individuals regarding their personal data, including requests to access, correct, delete, restrict, or transfer personal data.
To the extent reasonably practicable and taking into account the nature of the processing, SPRL will provide reasonable assistance to the Customer in fulfilling such requests where required under applicable law.
If SPRL becomes aware of a confirmed personal data breach affecting Customer personal data, we will take reasonable steps to investigate, contain, and mitigate the incident.
Where required by applicable law or our contractual obligations, SPRL will notify the affected Customer without undue delay after becoming aware of the confirmed breach.
Such notification may include available information regarding the nature of the incident, the categories of data affected, the actions taken by SPRL, and any recommended steps for the Customer.
SPRL retains personal data only for as long as necessary to provide the Services, fulfil contractual obligations, comply with applicable laws, resolve disputes, enforce agreements, and maintain legitimate business records.
Upon termination of the applicable Services or at the Customer's request, SPRL may delete or return Customer personal data where reasonably practicable, unless continued retention is required or permitted by applicable law.
Certain information may continue to be retained in backups, security logs, audit records, or archived systems for limited periods in accordance with our operational, legal, and security requirements.
Where required by applicable law or a written agreement, SPRL may provide reasonable information demonstrating compliance with the obligations described in this DPA.
Any audit or compliance review must:
Each party remains responsible for its own compliance with applicable data protection laws and for the obligations assigned to it under this DPA.
Nothing in this DPA expands or limits either party's liability beyond the limitations set out in the applicable Terms of Service, enterprise agreement, or other governing contract between the parties, unless otherwise required by applicable law.
Each party agrees to comply with the data protection, privacy, and security laws applicable to its respective role in relation to the processing of personal data under this DPA.
Nothing in this DPA requires either party to act in a manner that would violate applicable laws or regulatory obligations.
SPRL may update this Data Processing Agreement from time to time to reflect changes in applicable laws, regulatory guidance, industry standards, security practices, technologies, or our Services.
Material changes will become effective upon publication unless a different effective date is specified. Continued use of SPRL Services after such changes become effective constitutes acceptance of the updated DPA.
This DPA forms part of and is incorporated into the applicable agreement governing the Customer's use of SPRL Services, including the Terms of Service or any executed enterprise agreement.
In the event of a conflict between this DPA and the governing agreement regarding the processing of personal data, the provisions of this DPA shall prevail solely with respect to such processing, unless otherwise expressly agreed in writing.
If you have questions regarding this Data Processing Agreement, require additional information about our data processing practices, or wish to discuss enterprise privacy or compliance requirements, please contact us through our official support channels.
Email: [email protected]
Contact Us: https://insprl.com/page/contact-us
Website: https://insprl.com
SPRL is committed to processing personal data responsibly, securely, and transparently. We continuously invest in technical, organisational, and operational safeguards designed to protect customer data, support regulatory compliance, and build long-term trust with our business and enterprise customers.
We use cookies to improve your experience, analyse traffic, and personalise content. By clicking “Accept”, you consent to the use of cookies as described in our Cookie Policy .
Accept cookies Read our Cookie Policy
