Skip to content
Trust & Legal · Privacy

GDPR Compliance

Last updated:

FoxtINN supports customers who need GDPR and UK GDPR compliance for personal data processed in the FoxtINN service. This page is a summary; the DPA and Privacy Policy control if there is a conflict. It is not a claim that FoxtINN is “GDPR certified” — there is no such government seal.

Roles

For the marketing site and our own sales records, FoxtINN is typically the controller. For Customer Data in the product, the customer is the controller (or a processor for its own customers) and FoxtINN is the processor, as set out in the DPA.

Legal basis

We process personal data based on contractual necessity, legitimate interests, or consent depending on the activity, as described in the Privacy Policy and DPA. Marketing-site demo requests are processed to respond to your inquiry.

Data Processing Agreement

A DPA is available on request and is incorporated for customers processing personal data subject to GDPR / UK GDPR as stated in the order form or DPA. Email hello@foxtcon.com.

EU / UK representation

Where we are required to appoint an EU or UK representative, details will be provided in the DPA or on request at hello@foxtcon.com. If no representative is yet appointed for a particular regime, contact us and we will confirm current status. We do not invent a representative address on this page.

Data subject rights

EU/EEA and UK residents may exercise access, rectification, erasure, restriction, portability, and objection rights via hello@foxtcon.com. We may need to verify identity and will respond within applicable statutory timelines. You may lodge a complaint with your supervisory authority.

Transfers

Production is hosted in the United States (AWS us-east-2 by default). International transfers rely on Standard Contractual Clauses (SCCs) and supplementary measures where required, as detailed in the DPA. Portfolio customers may request custom data residency in EU or Canada regions where we can support it contractually.

Subprocessors

See the Subprocessors page. Advance notice and objection rights are described in the signed DPA (typically 30 days).