Data Processing Agreement (DPA)

Business data-processing roles and agreement requests

Business data-processing agreements

Current information: 29 October 2026.

PopaDex is operated by Administrative Burden Ltd, registered in England and Wales (company number 17363389). Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Contact: [email protected].

PopaDex’s role depends on the processing. Administrative Burden Ltd acts as controller for its own account, service-security and business purposes. Where PopaDex processes personal data on a business customer’s documented instructions, the applicable controller/processor roles, scope and obligations must be set out in an agreed data-processing agreement.

To request a business DPA or discuss an existing agreement, contact [email protected]. Identify the requested service and processing without sending customer records, bank credentials, passwords or recovery material.

This informational page does not execute a DPA, accept provider terms, or replace, terminate or amend an already executed agreement. It does not establish a transfer or novation of historic agreements. Existing agreed terms must be checked for the particular relationship.

Current processing information

PopaDex and LookupDock use Hetzner hosting in Germany and Cloudflare’s HTTPS proxy. For a business DPA, we will confirm the applicable roles, subprocessors, retention and transfer arrangements for the requested processing before agreement.

The current Privacy Policy explains personal-data processing and rights. See signup email security for the advisory email-only check, its purpose and basis, objection/erasure process and scheduled retention. The vault encryption scope and limitations distinguish supported client-encrypted fields from service, provider, billing and operational data.