Version 1.0 · Effective September 1, 2026
Data Processing Addendum
Shopxare, LLC
This Data Processing Addendum (“DPA”) is between Shopxare, LLC (“Processor”) and the customer who signs an order or is onboarded to a workspace (“Controller”).
1. Roles
For customer conversations and help content you store in Shopxare, you are the controller (or a processor for your own customer) and we are the processor. For lead forms on shopxare.com, we are the controller — that processing is described in the Privacy Policy, not this DPA.
2. Instructions
We process personal data only to provide the service, on your documented instructions, including these Terms and this DPA.
3. Security
We apply reasonable technical and organisational measures: access control, encryption in transit, backups, and staff confidentiality.
4. Sub-processors
We use hosting, email and security providers. A current list is available on request at info@shopxare.com. We will impose written data-protection terms on them.
5. International transfers
Where we transfer personal data out of the EEA or UK, we use an approved transfer mechanism.
6. Assistance
We will assist you with data-subject requests, security incidents and reasonable DPIAs, at cost if the work is not inherent to the service.
7. Incidents
We will notify you without undue delay after becoming aware of a personal-data breach affecting your workspace.
8. Return and deletion
When the workspace closes we will delete or return personal data within 60 days, except copies kept as required by law.
9. Audits
You may request our latest security summary once per year. On-site audits require reasonable notice and a confidentiality undertaking.