Contract · Version 2026-11-05
Data processing terms
These terms apply when you, as a controller, send personal data through Proxlio and we process it only to route that traffic.
Updated 5 November 2026 · These terms govern the website and accounts opened here. A paid supply of exits starts only when checkout confirms it. They are the company’s terms for this product; have them read by your own adviser if your use is unusual.
Parties
You are the controller. FORCESCRIPTS LTD is the processor. These terms supplement the terms of service and prevail over them for the processing they describe. They are written to meet UK GDPR article 28 and, where you are in the EEA, EU GDPR article 28.
Subject matter and duration
The subject matter is the routing of network traffic you submit to the gateway. Processing lasts for the paid term, and afterwards only as long as logs in the retention list of the privacy notice still exist. Then those logs are deleted.
Nature, purpose and data
The nature is transmission and short-term logging. Destination hostname and port records are kept for 30 days and other usage logs typically for 90 days; the content of traffic is not recorded. The purpose is to provide the exit you ordered. The data may include IP addresses, request metadata and any personal data you choose to put in a request. Data subjects are the people your traffic concerns. You will not instruct us to process special-category data. If a request happens to contain it, you remain the controller and you must have a lawful basis.
Instructions
We process that traffic only on your documented instructions, which are: route it as the gateway request says, keep the security logs described in the privacy notice, and disclose it if the law requires. If a law requires us to go further, we will tell you unless the law forbids that notice. If we believe an instruction breaks the law, we will tell you and pause that instruction.
Confidentiality and security
People who can see the traffic are under a duty of confidence. We keep measures appropriate to a routing service: access control, hashed customer passwords, encryption in transit on the production site, and separation of the customer database. You are responsible for using TLS to your destination where the destination supports it.
Sub-processors
The sub-processors for traffic content are our proxy infrastructure partner and the host of this application; you give general authorisation for them. You can ask [email protected] for the current list. We will impose a written duty on them that is no weaker than this page on the part of the processing they do. If we add a sub-processor for traffic content, we will update the privacy notice before or as the change happens. You may object on a reasonable data-protection ground; if we cannot offer another route, you may close the affected plan.
Assistance, deletion and audits
We will assist you with data-subject requests, impact assessments and consultations that concern the routing we do, taking into account the nature of the processing. We will tell you without undue delay after we become aware of a personal-data breach affecting your traffic. At the end of the service we delete the related logs on the timetable in the privacy notice, unless the law requires us to keep a record. Once a year you may ask for a summary of our security measures. A deeper audit needs reasonable notice, must not disrupt other customers, and is at your cost unless it finds a material breach.
International transfers
Where routing sends personal data outside the UK or the EEA, we use the transfer tool described in the privacy notice. If you are the exporter as well, you will complete any assessment your own law requires. These processing terms are governed by the law of England and Wales, without taking away a mandatory protection that applies to you as a controller in your country.