Skip to content

Data Processing Addendum

Last updated: May 2026

This Data Processing Addendum (“DPA”) forms part of the Lineup Terms of Service between you and Lineup. It applies when you are a data controller and Lineup processes personal data on your behalf as a data processor under applicable data protection law, including the GDPR.

1. Definitions

“Personal Data,” “Controller,” “Processor,” “Processing,” and “Data Subject” have the meanings given in the GDPR. “Services” means the Lineup platform.

2. Processing details

Lineup processes the following categories of Personal Data:

  • Identity data: names and email addresses of your team and dealers.
  • Order data: shipping addresses of end recipients.
  • Financial data: wallet transaction records (amounts, not card numbers — those stay with Stripe).

3. Processor obligations

Lineup will:

  • Process Personal Data only on documented instructions from you.
  • Ensure persons authorized to process Personal Data are bound by confidentiality.
  • Implement appropriate technical and organizational security measures.
  • Assist you in responding to Data Subject requests.
  • Delete or return Personal Data on termination of the service.

4. Sub-processors

Lineup uses the sub-processors listed in our Privacy Policy §5. We will notify you with 30 days' notice before adding new sub-processors. You may object in writing within that period.

5. International transfers

Personal Data is stored in the United States. Transfers from the EEA or UK are made under appropriate safeguards (Standard Contractual Clauses or adequacy decision where applicable).

6. Requesting a signed DPA

Enterprise customers requiring a countersigned DPA should contact legal@lineupops.com.