Effective Date: 14 May 2026
Last Updated: 14 May 2026
This Data Protection Addendum (“DPA”) forms part of the agreement between Squaristic Media LLP (“Squaristic,” “we,” “us,” or “our”) and the client receiving our services (“Client,” “you,” or “your”).
This DPA describes how personal data is handled when Squaristic provides B2B demand generation, content syndication, intent marketing, email marketing, account-based marketing, webinar marketing, telemarketing, data-cleansing, and related services.
1. Purpose
Squaristic is committed to handling personal data responsibly and in accordance with applicable data protection laws.
This DPA applies where Squaristic processes personal data on behalf of a Client in connection with our services. It is intended to support compliance with applicable privacy and dataprotection laws, including the EU General Data Protection Regulation (“GDPR”), the UK GDPR, the California Consumer Privacy Act (“CCPA”), and applicable Indian data-protection laws.
2. Roles and Responsibilities
The role of each party depends on the service being provided.
When Squaristic acts as a Processor
Where a Client provides personal data to Squaristic, or asks Squaristic to process personal data solely on the Client’s behalf, the Client acts as the Data Controller and Squaristic acts as the Data Processor.
In these circumstances, Squaristic will process personal data only:
• To provide the agreed services;
• In accordance with the Client’s documented instructions;
• As required by applicable law; and
• As otherwise permitted under the agreement between Squaristic and the Client.
When Squaristic acts as an Independent Controller
For certain lead-generation, content-syndication, audience-targeting, data-enrichment, and campaign services, Squaristic may independently collect, verify, organize, or provide professional business-contact information.
In these circumstances, Squaristic and the Client may each act as independent Data Controllers. Each party is responsible for complying with applicable data-protection laws for its own use of personal data.
Clients receiving lead or contact data from Squaristic must use that information only for lawful business and marketing purposes, honor applicable opt-out requests, and comply with all relevant marketing and privacy laws.
3. Types of Personal Data We May Process
Depending on the services provided, Squaristic may process the following categories of personal data:
• Name;
• Business email address;
• Business phone number;
• Job title and department;
• Employer and company information;
• Business address and geographic location;
• Professional profile and publicly available business information;
• Campaign engagement data, including content downloads, webinar registrations, email interactions, and form submissions;
• Account, audience, and targeting information;
• Technical data, such as IP address, browser type, device information, and online identifiers, where applicable; and
• Other information submitted by a Client or collected through agreed campaign activities.
Squaristic does not intentionally collect or process sensitive personal data unless expressly agreed in writing and appropriate safeguards are in place.
4. Categories of Individuals
Personal data processed by Squaristic may relate to:
• Client employees, users, and authorized representatives;
• Business prospects and professional contacts;
• Representatives of prospective customers, customers, partners, suppliers, and target accounts;
• Webinar registrants, event attendees, and content-download recipients; and
• Visitors who interact with campaign pages, forms, websites, or marketing materials.
5. How We Use Personal Data
Squaristic may process personal data to:
• Plan, manage, and deliver agreed marketing and demand-generation services;
• Identify and build relevant B2B audiences;
• Conduct content-syndication and lead-generation campaigns;
• Send or support lawful business communications;
• Register and follow up with webinar or event participants;
• Validate, cleanse, enrich, segment, and qualify business-contact data;
• Deliver campaign reports and lead information to Clients;
• Provide customer support;
• Maintain security and prevent misuse or fraud; and
• Meet our legal, regulatory, and contractual obligations.
6. Lawful Processing and Client Responsibilities
Clients are responsible for ensuring that their instructions to Squaristic are lawful and that they have an appropriate legal basis to use any personal data they provide to us.
Clients must also ensure that they:
• Provide any notices required by law;
• Obtain consent where consent is required;
• Maintain appropriate suppression and opt-out lists;
• Honor individual privacy rights and marketing preferences; and
• Use data received from Squaristic in compliance with applicable privacy, anti-spam, telemarketing, and marketing-communications laws.
7. Data Security
Squaristic maintains reasonable technical, organizational, and administrative safeguards designed to protect personal data from unauthorized access, use, loss, alteration, disclosure, or destruction.
Our safeguards may include access controls, confidentiality commitments, security procedures, staff awareness measures, and controls appropriate to the nature and sensitivity of the personal data we process.
No system is completely secure. However, we take reasonable steps to protect personal data and continually review our practices as our services and legal obligations evolve.
8. Confidentiality
Squaristic ensures that personnel authorized to process personal data are subject to appropriate confidentiality obligations.
We limit access to personal data to personnel, contractors, and service providers who need access to perform their duties or provide the services.
9. Service Providers and Subprocessors
Squaristic may use trusted third-party service providers to support our operations and services, including providers of hosting, analytics, email, communications, customer support, security, and campaign-delivery tools.
Where these providers process personal data on our behalf, we require them to protect that information and use it only for authorized purposes consistent with applicable law and contractual obligations.
10. International Data Transfers
Squaristic may process or transfer personal data across borders where necessary to provide services, support Clients, or use trusted service providers.
Where applicable law requires safeguards for international transfers, Squaristic will use appropriate transfer mechanisms, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another legally recognized transfer mechanism.
11. Data Subject Requests
If Squaristic receives a request from an individual relating to personal data processed solely on behalf of a Client, Squaristic will, where legally permitted, direct that individual to the Client or notify the Client of the request.
Squaristic will reasonably assist Clients with responding to valid requests from individuals to access, correct, delete, restrict, or object to the processing of their personal data, where required by applicable law.
12. Data Incidents
If Squaristic becomes aware of a confirmed personal-data breach affecting personal data processed on behalf of a Client, we will notify the affected Client without undue delay.
We will provide available information reasonably necessary to help the Client understand, investigate, and respond to the incident in accordance with applicable law.
13. Data Retention and Deletion
Squaristic retains personal data only for as long as reasonably necessary to provide services, meet legal or contractual obligations, resolve disputes, enforce agreements, and maintain appropriate records.
At the end of the applicable service relationship, Squaristic will return or securely delete Clientprovided personal data upon written request, unless continued retention is required by law or reasonably necessary for legitimate business purposes.
This does not require Squaristic to delete anonymized, aggregated, or independently controlled data where retention is permitted by applicable law.
14. California Privacy Terms
Where Squaristic processes personal information on behalf of a Client subject to the CCPA, Squaristic will act as a Service Provider or Contractor, as applicable.
Squaristic will not sell or share Client personal information, and will not retain, use, or disclose such information for purposes other than providing the agreed services, except where otherwise permitted by applicable law.
15. Changes to This DPA
We may update this DPA from time to time to reflect changes in our services, business practices, or legal requirements.
The most current version will be published on this page. Where a change materially affects our contractual data-protection obligations, we will provide notice to affected Clients where required by law or contract.
16. Contact Us
For questions about this Data Protection Addendum, privacy, or personal-data practices, please contact us:
Squaristic Media LLP
Website: www.squaristic.com
Email: info@squaristic.com
Address: [Insert Registered Office Address]
If you are a Client and need to enter into a signed DPA with Squaristic, please contact us at
info@squaristic.com.