Data Processing Agreement (Draft)
Version 1.0 · Effective 2026-08-08 · Last updated 2026-08-08
Placeholder DPA for enterprise customers - pending legal review.
Status of this document
This is a placeholder prepared for enterprise review. It is not executed, not binding, and has not been reviewed by counsel. To request a signed Data Processing Agreement, contact [PRIVACY EMAIL].
Roles of the parties
For business records that a customer enters into the platform about its own retailers, staff and clients, the customer acts as controller and [LEGAL COMPANY NAME] acts as processor. For account administration, billing and platform security, [LEGAL COMPANY NAME] acts as controller.
Scope and instructions
We process customer personal data only to provide the service and in line with the customer's documented instructions, as given through use of the platform and any executed agreement.
Confidentiality
Personnel with access to customer data are bound by confidentiality obligations.
Security measures
The technical and organizational measures actually implemented are described on the Security page and are incorporated here by reference. No measures beyond those described are represented.
Subprocessors
Current subprocessors are published on the Subprocessors page. [NOTICE PERIOD FOR SUBPROCESSOR CHANGES - FOR LEGAL REVIEW].
Data subject requests
We will provide reasonable assistance to the customer in responding to data subject access, correction, export and deletion requests, using the privacy request workflow in the portal.
Personal data breach
We will notify the customer without undue delay after becoming aware of a personal data breach affecting its data. [SPECIFIC NOTIFICATION WINDOW - FOR LEGAL REVIEW].
International transfers
[TRANSFER MECHANISM - STANDARD CONTRACTUAL CLAUSES OR OTHER - FOR LEGAL REVIEW].
Deletion and return
On termination we delete or return customer personal data in accordance with the retention practices described in the Privacy Policy, subject to legal retention requirements.
Audits
[AUDIT AND EVIDENCE RIGHTS - FOR LEGAL REVIEW].
Governing terms
This DPA supplements the Terms of Service. Governing law and jurisdiction: [GOVERNING STATE/COUNTRY], [COURT/JURISDICTION]. [FOR LEGAL REVIEW].