Legal

Data Processing Addendum

This DPA describes the default processor relationship when a customer uses Layout Pages to host content, collect form submissions, and operate a visitor-facing site.

Last updated: April 16, 2026

Roles

For customer site visitor data processed through hosted sites, the customer is generally the controller and Layout Pages acts as a processor or service provider for the services described in the agreement.

Layout Pages is independently responsible for data it processes for its own purposes, such as account administration, billing, fraud prevention, platform security, analytics about the platform itself, and legal compliance.

Instructions, Security, and Assistance

Layout Pages processes customer data only on documented customer instructions as reflected in the customer agreement, product configuration, and lawful support or maintenance requests.

We implement reasonable technical and organizational measures appropriate to the service and will provide reasonable assistance, taking into account the nature of the processing, for customer responses to data-subject requests and certain security or compliance obligations.

Subprocessors, Transfers, and Contact

Current core subprocessors are listed on the Subprocessors page. Where international transfer mechanisms or customer-specific terms are required, they should be addressed in a signed order form or negotiated DPA rider.

Questions or customer DPA requests can be sent to [email protected].