Splitifi and General Data Protection Regulation (GDPR):

Splitifi’s product and business operations comply with GDPR guidelines, ensuring compliance as both a data controller and data processor.

What is GDPR?

The General Data Protection Regulation (GDPR) is a unified data protection law that came into effect on May 25, 2018, in the EU, replacing the European Data Protection Directive 95/46/EC.

This regulation enhances the protection of personal data belonging to EU individuals and gives them greater control over how their data is used within the EU and internationally. GDPR seeks to unify data privacy laws across the EU and ensure stronger regulatory enforcement for businesses handling EU individuals’ personal data.

Who Does GDPR Affect?

GDPR applies to all businesses that process personal data of EU residents, whether inside or outside the EU. Businesses handling personal data under GDPR are categorized as either:

• Data Controllers – Entities that collect and determine how personal data is used.
• Data Processors – Entities that process personal data on behalf of a data controller.

GDPR broadens the definition of personal data to include:

• Location data
• Online identifiers (e.g., IP addresses)
• Electronic metadata

Businesses that fail to comply with GDPR may face significant fines and regulatory actions.

How Does Splitifi Address GDPR Compliance?

At Splitifi, we view GDPR as a vital framework to enhance individuals’ rights over their personal data. We have aligned our product features and business operations to fully comply with GDPR, ensuring:

• Compliance as both a Data Controller and Data Processor
• Transparent Terms of Service & Privacy Policy
• Security measures and tools that support compliance

These updates are reflected in our Terms of Service and Privacy Policy, which include:

• AU Terms of Service (for customers using au.app.splitifi.com)
• EMEA Terms of Service (for customers using eu.app.splitifi.com)
• North American Terms of Service (for customers using app.splitifi.com)
• Privacy Policy

Splitifi’s EU Terms of Service explicitly recognize our role as a data processor for law firms. We continue to fulfill this role while equipping law firms with GDPR compliance tools and customer support to help them meet their obligations as data controllers.

For North American customers affected by GDPR, our Data Protection Addendum (Exhibit B) serves as compliance documentation to meet GDPR requirements.

Privacy and Security Commitments

Privacy Policy – Outlines how personal data is collected, stored, and secured.

Data Security – Industry-leading security measures protect stored and transmitted data.

Compliance Tools – Splitifi provides advanced security features to help law firms protect any client data stored within the platform.

Additional Resources

For general GDPR information, visit the Information Commissioner’s Office (ICO) website.

Additional GDPR resources for law firms:

For GDPR-related inquiries, contact us at privacy@mysplitifi.com.