Data Processing
Agreement (DPA)
This Agreement sets out the terms, requirements, and conditions on which we will process Personal Data when providing services to you.
1. Scope and Responsibilities
Where My Money Went acts as the Processor and the Customer acts as the Controller. We shall process Personal Data only on documented instructions from the Controller, including with regard to transfers of personal data to a third country or an international organization.
2. Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Regular vulnerability assessments
- Access control and authentication enforcement
Processing Details
Data Subjects
The personal data transferred concern the following categories of data subjects: Customers, potential customers, website visitors, and employees of the Controller.
Duration
Processing shall continue for the duration of the Agreement and any subsequent period required by applicable law.
Nature of Processing
Collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, and erasure.
This document was last updated on February 2026.
Contact Legal Team