Legal

Data Processing Addendum

The terms applying when Sohobyte Ltd processes personal data on behalf of customers using Sohobyte AI.

Last updated: 18 June 2026

1. Scope

This Data Processing Addendum applies where Sohobyte Ltd processes personal data on behalf of a customer in connection with Sohobyte AI.

2. Roles

The customer is the controller and Sohobyte Ltd is the processor unless the parties agree otherwise in writing. Sohobyte may separately act as controller for account, billing, security and service-administration information.

3. Processing instructions

Sohobyte will process customer personal data only on documented instructions from the customer, including instructions contained in the agreement and use of the service, unless processing is required by law.

4. Confidentiality and security

Sohobyte will ensure that authorised personnel are subject to confidentiality obligations and will implement appropriate technical and organisational measures designed to protect personal data.

5. Subprocessors

The customer authorises Sohobyte to use the subprocessors listed on the Subprocessors page. Sohobyte will impose appropriate data-protection obligations on subprocessors.

6. Data-subject requests

Taking into account the nature of the processing, Sohobyte will provide reasonable assistance to help the customer respond to requests from individuals exercising applicable data-protection rights.

7. Breach notification

Sohobyte will notify the customer without undue delay after becoming aware of a personal-data breach affecting customer data and will provide reasonably available information needed to support the customer's obligations.

8. International transfers

Where customer personal data is transferred internationally, Sohobyte will use an appropriate lawful mechanism where required.

9. Deletion and return

Following termination, Sohobyte will delete or return customer personal data within a reasonable period, except where retention is required by law, necessary for security or contained in protected backups that are later deleted through normal retention cycles.

10. Audits and information

Sohobyte will make available information reasonably necessary to demonstrate compliance with applicable processor obligations. Any audit must protect other customers, confidentiality, security and Sohobyte's systems.

Questions or legal requests

Contact Sohobyte Ltd at support@sohobyte.co.uk.

Sohobyte AI is a trading name and product of Sohobyte Ltd, company number 16940389, registered in England and Wales.

Return to Sohobyte AI