Last Updated: 10/6/2025

This Data Processing Addendum (“DPA”) forms part of the Terms of Service located at https://webinarfuel.com/terms-wf
(the “Agreement”) entered into between WebinarFuel, LLC. (“WebinarFuel”) and the customer (“Customer”) who has entered into the Agreement to use WebinarFuel’s Services.

This DPA reflects the Parties’ agreement regarding the processing of Personal Data in accordance with applicable Data Protection Laws.

1. Definitions

For the purposes of this DPA:

“Data Protection Laws” means all applicable data-protection and privacy legislation, including the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the UK GDPR and Data Protection Act 2018, the California Consumer Privacy Act of 2018 as amended by the CPRA (“CCPA/CPRA”), and any other applicable laws and regulations.

“Controller” means the entity that determines the purposes and means of the processing of Personal Data.

“Processor” means the entity that processes Personal Data on behalf of the Controller.

“Personal Data” means any information relating to an identified or identifiable natural person.

“Processing” and related terms have the meanings given in applicable Data Protection Laws.

The Parties agree that Customer is the Controller and WebinarFuel is the Processor.

“End Users” means individuals whose Personal Data is uploaded to, stored in, or processed through the Services by Customer, including registrants, attendees, leads, and subscribers.

“Services” has the meaning set forth in the Agreement.

“User Content” has the meaning set forth in the Agreement.

2. Scope and Duration

This DPA applies to WebinarFuel’s processing of Personal Data on behalf of Customer as necessary to provide the Services under the Agreement and remains in effect for as long as WebinarFuel processes Personal Data on Customer’s behalf.

3. Processor Obligations

Processing Only as Necessary. WebinarFuel processes Personal Data solely to provide the Services as described in the Agreement and this DPA. Any additional instructions must be mutually agreed in writing and may be subject to additional fees.

Confidentiality. Personnel with access to Personal Data are bound by confidentiality obligations.

Security. WebinarFuel implements and maintains appropriate technical and organizational measures to protect Personal Data against unauthorized or unlawful processing and accidental loss, destruction, or damage.

Sub-processors. WebinarFuel may engage sub-processors to support delivery of the Services. Sub-processors are bound by data-protection terms substantially similar to this DPA. WebinarFuel uses commercially reasonable efforts to ensure compliance but is not liable for acts or omissions it could not reasonably have prevented.

Data-Subject Requests. WebinarFuel provides reasonable assistance, only to the extent strictly necessary and limited to data stored within the Service, to enable Customer to respond to data-subject requests where Customer cannot reasonably fulfill its obligations without WebinarFuel’s co-operation.

Breach Notification. In the event of a confirmed Personal Data Breach that WebinarFuel reasonably determines is likely to result in a risk to individuals’ rights and freedoms, WebinarFuel notifies Customer without undue delay after confirming such breach and takes commercially reasonable steps to mitigate its effects.

Deletion or Return. Within ninety (90) days after termination or expiration of the Agreement, WebinarFuel deletes or anonymizes Customer Personal Data within its production systems, except where retention is required by law or for legitimate business purposes such as dispute resolution or recordkeeping.

Demonstrating Compliance. WebinarFuel makes available standard documentation or certifications (e.g., SOC 2, ISO 27001, or equivalent summaries) sufficient to demonstrate compliance with its data-protection obligations. Customer agrees that this satisfies its right to verify compliance under Article 28(3)(h) GDPR.

4. International Data Transfers

Where Personal Data is transferred from the EEA, UK, or Switzerland to a country not recognized as providing adequate protection, such transfers are governed by the applicable Standard Contractual Clauses (SCCs) (Commission Decision (EU) 2021/914) or the UK International Data Transfer Addendum (IDTA), as required by law.
If applicable, WebinarFuel may rely on certification under the EU-U.S. Data Privacy Framework or equivalent adequacy mechanisms.

5. Customer Obligations

Customer is solely responsible for:

(a) ensuring a lawful basis for all Processing of Personal Data, including obtaining any required consents or permissions from End Users;

(b) providing all legally required notices to data subjects;

(c) determining the content, recipients, timing, and purpose of all Communications sent through the Services;

(d) complying with all applicable laws relating to email, SMS, push notifications, marketing, and advertising, including but not limited to the TCPA, CAN-SPAM, CASL, GDPR, UK GDPR, and similar laws; and

(e) ensuring that Personal Data shared with WebinarFuel is accurate, relevant, and limited to what is necessary for the Services.

6. CCPA/CPRA Compliance

For purposes of the CCPA/CPRA, WebinarFuel acts as a “Service Provider” and “Contractor,” as those terms are defined under applicable law.

WebinarFuel shall not:
a) Sell or share Personal Information;
b) Retain, use, or disclose Personal Information for any purpose other than providing the Services; or
c) Combine Personal Information with data obtained from other sources except as permitted by law.

7. Data Protection Contact

WebinarFuel has appointed a contact for data-protection inquiries:
📧 privacy@webinarfuel.com

Subject line: Attention: Data Protection

8. Governing Law

This DPA is governed by and construed in accordance with the laws set forth in the Agreement between Customer and WebinarFuel.

Annex 1 — Details of Processing

Subject Matter: Provision of the WebinarFuel Services.
Duration: For the duration of the Agreement and up to 90 days following termination.
Nature and Purpose: Hosting, transmitting, and analyzing end-user interactions for Customer’s webinar automation, analytics, and performance optimization.

Types of Personal Data:

City

Region

Country

Time zone

Browser

Browser Version

Device

Current URL

Initial Referrer

Initial Referring Domain

Operating System

Referrer

Referring Domain

Screen Height

Screen Width

Search Engine

Search Keyword

UTM Parameters (i.e., any UTM tags associated with the link a customer clicked to arrive at the domain)

Categories of Data Subjects: Users or visitors of Customer’s websites or mobile applications, or The provision of Service by WebinarFuel to Customer.

WebinarFuel processes Personal Data solely on Customer’s documented instructions and does not determine the content of webinars, messages, or offers presented to End Users.

Annex 2 — Security Measures (Summary)

WebinarFuel implements commercially reasonable technical and organizational security measures, including but not limited to:

Access control policies and authentication protocols;

Regular security monitoring;

Data backup and recovery mechanisms;

Employee confidentiality agreements and security training;

Incident-response and breach-notification procedures.


​WebinarFuel does not determine the purposes or means of Customer’s Communications and is not responsible for Customer’s compliance with marketing or messaging laws.