GDPR
Last updated: 18 May 2026
This page summarises how ListBouncer handles personal data under the General Data Protection Regulation (GDPR) and what rights you have.
Lawful basis for processing
When you upload a list, you act as the data controller and ListBouncer acts as the data processor under Article 28 of the GDPR. You must have a lawful basis (consent, legitimate interest, contract) to process the addresses you upload.
Your rights as a data subject
If you're an end-user whose address was processed, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. Contact the controller (the organisation that uploaded your address) first. If they direct you to us, we'll co-operate.
Retention
Uploaded CSV files are processed in memory and never written to disk; once verification finishes, the original file is gone. Result rows (one per address) are retained in your account until you delete them or your account closes, at which point the address rows are removed too.
Contact
Data protection enquiries: support@listbouncer.com.