Legal
Data Processing Addendum
Last updated | 1 June 2026
This Addendum forms part of the Terms of Service between you (Controller) and 99 Developers Ltd, a company registered in England and Wales (company number 17257492), which owns and operates 99 Data Rooms (Processor), where you process personal data subject to UK GDPR or EU GDPR via the Service.
Subject matter
Provision of the document sharing Service described in the Terms.
Nature and purpose of processing
Hosting, transmission, access control, and analytics for documents you upload and share.
Types of data and data subjects
Personal data contained in your uploaded documents and identifiers of recipients you grant access to (typically business contacts and prospects).
Sub-processors
- Supabase (hosting, database, storage), EU/UK.
- Email delivery provider, EU.
Security measures
See our security page. We notify you without undue delay of any confirmed personal data breach affecting your data.
International transfers
Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses and the UK Addendum.
Term and deletion
On termination of the Service we delete or return personal data within 30 days, subject to legal retention requirements.
Need a signed DPA for your records? Email legal@99datarooms.com.