Data Processing Addendum

Last updated: June 2026

This Data Processing Addendum ("DPA") forms part of the agreement between Printofor ("Processor") and the customer ("Controller") and governs the processing of personal data in the course of providing the Printofor service.

Scope and roles

When you use Printofor to provide a gang sheet ordering experience to your customers, you act as the Controller of your customers personal data. Printofor acts as a Processor, processing personal data only on your behalf and according to your instructions. We do not use your customers data for our own purposes.

Nature and purpose of processing

Printofor processes personal data solely to provide the builder, nesting, and export service you have configured. This includes storing and processing artwork files uploaded by your customers to produce print-ready output, and associating those files with order records for download delivery. Processing is limited to what is strictly necessary for service delivery.

Security measures

Printofor implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include encryption in transit, access controls, and regular security reviews. A full description of our technical measures is available on request.

Sub-processors

Printofor may engage sub-processors (for example, cloud hosting providers) to assist in delivering the service. We ensure each sub-processor is bound by data protection obligations no less protective than those in this DPA. A list of current sub-processors is available on request. We will give reasonable advance notice before adding or replacing a sub-processor that processes personal data.

Data subject rights and deletion

If one of your customers exercises a data subject right (access, erasure, portability, restriction), we will assist you in fulfilling that request to the extent technically possible. Production files are automatically deleted on the expiry schedule described in the Privacy Policy. On termination of your subscription, we will delete or return personal data within 30 days unless retention is required by law.

Contact

See our contact & merchant details or email hello@printofor.com.