Lacspace Legal
Data Processing Agreement
Last updated June 1, 2026
This is a standard template published for transparency and is being finalised with legal counsel — it isn’t a substitute for tailored legal advice. For binding terms, please contact our team.
This Data Processing Agreement (DPA) sets out the terms under which Lacspace processes personal data on behalf of customers. This is a standard template summary and should be reviewed by your legal counsel.
1Roles of the parties
Where the customer determines the purposes and means of processing, the customer acts as the data controller and Lacspace acts as the data processor in respect of customer personal data.
2Scope & purpose of processing
Lacspace processes personal data only to provide the contracted services and in accordance with the customer's documented instructions, unless otherwise required by law.
3Confidentiality
Personnel authorized to process personal data are bound by appropriate confidentiality commitments and access is limited to what is necessary to deliver the service.
4Sub-processors
The customer authorizes Lacspace to engage sub-processors under written terms that impose data protection obligations equivalent to those in this DPA. A current list is available on request.
5Security measures
Lacspace implements appropriate technical and organizational measures designed to ensure a level of security appropriate to the risk, including access controls, encryption in transit and regular review.
6Data subject requests & breach notification
Lacspace will assist the customer in responding to data subject requests and will notify the customer without undue delay after becoming aware of a personal data breach.
7Return & deletion of data
Upon termination of the services, Lacspace will, at the customer's choice, delete or return personal data, subject to any legal retention requirements.