​

GDPR Compliance

Tightknit is GDPR compliant and we have made it a priority to protect your data.

​

What is GDPR?

The General Data Protection Regulation (GDPR) is a data privacy law introduced by the European Union. It grants EU residents rights over their personal data such as:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object

​

Why is GDPR Necessary?

Many of the communities using Tightknit operate within the EU or have members there. Adhering to the GDPR allows us and our customers to meet these legal obligations without compromising privacy.

​

Our GDPR Compliance

​

Self-Assessment and Monitoring

GDPR is a law rather than a certification, so Tightknit self-assesses its compliance and monitors GDPR controls with industry-standard tooling.

​

Data Storage and Transfers

Customer data is hosted in the United States. Our Data Processing Addendum (DPA) includes Standard Contractual Clauses covering data transfers from the EU to the US.

​

EU and UK Representatives

Tightknit, Inc. is established in the United States. As required by Article 27 of the EU GDPR and of the UK GDPR, we have appointed representatives in the European Union and in the United Kingdom. Data subjects and supervisory authorities in either jurisdiction can contact them directly on any matter relating to our processing of personal data. EU Representative — Euverify Ltd (Ireland), Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland. Email: [email protected] UK Representative — Euverify Ltd (UK), 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom. Email: [email protected] Data subject access requests, deletion requests and other GDPR enquiries can also be submitted through our representative’s secure portal, where they are logged and tracked. Contacting our representative does not affect your right to contact us directly at [email protected], or to lodge a complaint with your local supervisory authority.

​

Protecting Personal Data

Tightknit follows security best practices to safeguard personally identifiable information. See our DPA for details on our technical and organizational measures.

​

Processor Obligations

We have implemented the procedures required to comply with GDPR. Our DPA outlines our processor obligations and our Terms of Service and Privacy Policy incorporate these requirements.

​

GDPR Resources

• View our DPA
• View our privacy policy
• View our subprocessors
• View our cookie policy

​

GDPR Questionnaires

If you have a GDPR questionnaire, please contact us at [email protected]. Requests to modify our DPA or other legal documents require an Enterprise Plan.