Draft. This page describes how Sewpress really works today, but it hasn't had a lawyer's review yet. Questions: write to us at the address at the bottom.

Data processing agreement

This agreement is part of our terms for business customers. It applies when files you upload contain personal data you are responsible for (for example a tester's name in a pattern's credits). For that data, you are the controller and Sewpress (company details to follow) is your processor under GDPR Article 28. It takes effect when you accept the terms; no signature is needed.

1. What we process

• Subject: building pattern files from your master files.
• Data: whatever personal data your files and account contain.
• People: you, your team, and anyone named in your files.
• Duration: while you use Sewpress, then deletion as below.

2. Our promises

1. We process the data only to provide Sewpress as you instruct through the app.
2. Everyone who can access it is bound to confidentiality.
3. We keep it secure: private storage, encrypted connections, access checked on every request, and links that expire within 15 minutes.
4. We use only the listed sub-processors, on terms at least this protective, and tell you 30 days before adding one so you can object.
5. We help you answer requests from people exercising their rights.
6. We tell you of a personal data breach without undue delay, and within 72 hours.
7. When you delete files or your account, we delete the data (master files are deleted after 24 hours by default anyway), except what the law makes us keep.
8. We give you the information you need to show compliance, and allow reasonable audits on request.

3. Transfers

Where a sub-processor is outside the EEA, transfers rely on an adequacy decision (such as the EU–US Data Privacy Framework) or the EU's standard contractual clauses.

4. Questions

Need a countersigned copy for your records? Email hello@sewpress.com.

Last updated 31 October 2026.