Data protection

For direct sign-ups UniDoodle is the data controller. For students added by a school or organisation, that organisation is the controller and UniDoodle acts as processor.

Organisations can request our standard DPA (including subprocessor list and international transfer terms) from privacy@unidoodle.com. Request our current data processing agreement from privacy@unidoodle.com and we will send it for signature.

Individuals can exercise access, rectification, deletion, portability and objection rights by emailing privacy@unidoodle.com. We aim to respond within 30 days.

We will notify affected controllers without undue delay and no later than 72 hours after becoming aware of a personal data breach, as required by GDPR Art. 33.