Data Processing Agreement
Last updated: May 9, 2026
This Data Processing Agreement ("DPA") forms part of the agreement between Fee Fi Form (the "Processor") and the Customer (the "Controller") and governs the processing of personal data submitted to Fee Fi Form.
1. Subject matter and duration
Processor will process personal data on behalf of Controller for the duration of the service agreement.
2. Nature and purpose
Processing is limited to providing form-collection, CRM, analytics, and notification features as configured by the Controller.
3. Categories of data subjects
Visitors and respondents who submit forms operated by the Controller.
4. Categories of personal data
Contact details, free-text responses, and any technical metadata enabled by the Controller (IP address, user agent, referrer).
5. Processor obligations
- Process personal data only on documented instructions from the Controller.
- Ensure persons authorized to process the data are bound by confidentiality.
- Implement appropriate technical and organizational measures (encryption in transit and at rest, RLS, access controls).
- Assist the Controller in responding to data subject requests and DPIAs.
- Notify the Controller without undue delay (within 72 hours) of any personal data breach.
6. Sub-processors
Controller authorizes Processor to engage sub-processors for hosting, database, email, and analytics. Current list available on request.
7. International transfers
Where data is transferred outside the EEA/UK, Processor relies on Standard Contractual Clauses.
8. Return or deletion
On termination, Processor will delete or return all personal data within 30 days, save where retention is required by law.
9. Audits
Processor will make available all information necessary to demonstrate compliance and allow for audits on reasonable notice.
Sign the DPA
To countersign this DPA, contact legal@feefiform.com.