Data processing — Subprocessors

You give us general authorisation to engage Subprocessors. The current list, what each one does and what data it touches, is published on the compliance page, which is the authoritative version — see Annex III. Before adding a new category of Subprocessor we will update that list. If you object to a new Subprocessor on reasonable data-protection grounds, tell us at privacy@rowfold.com within 30 days; we will work with you to find an alternative, and if we cannot, you may terminate the affected part of the Service and receive a pro-rata refund of anything paid for it in advance. We impose data-protection obligations on every Subprocessor that are no less protective than those in this DPA, and we remain fully liable to you for their performance.