Data Processing Agreement

DRAFT placeholder. The business must replace this file with the reviewed legal text. Remove the status: draft line at the top of the file to hide the DRAFT banner.

1. Roles

For the store, order and customer data that you connect to ToucanWise, you are the controller and ToucanWise is the processor. [Roles and definitions to be confirmed.]

2. Scope of processing

[Subject matter, duration, nature and purpose of processing, categories of data and data subjects to be completed.]

3. Our obligations

[Processing on documented instructions, confidentiality, security measures, assistance with data subject requests and breach notification to be completed.]

4. Subprocessors

You authorise the subprocessors listed on the Subprocessors page. [Notice and objection process for changes to be completed.]

5. International transfers

[Transfer mechanisms to be completed.]

6. Return and deletion

[Export, deletion and retention on termination to be completed.]

7. Audits

[Audit and information rights to be completed.]