Baarre · Legal & policies
Data Processing Agreement
The GDPR agreement covering shopper data we process on your behalf. Forms part of the Terms.
1. Roles
For shopper conversations, you are the controller and Baarre Technologies Ltd is the processor. You decide what is collected and why; we process only on your documented instructions.
2. Scope of processing
| Item | Detail |
|---|---|
| Subject matter | Providing AI customer support across your connected channels |
| Duration | While your subscription is active, plus your retention window |
| Nature | Collection, storage, retrieval, generation of replies, deletion |
| Data subjects | Your shoppers and your team members |
| Categories | Identifiers, contact details, message content, order references |
| Special categories | None requested. Do not configure Baarre to collect health, biometric or similar data. |
3. Our obligations
- Process only on your instructions, unless required by law.
- Bind every person with access to confidentiality.
- Apply the technical and organisational measures on our Security page.
- Use only approved subprocessors, and give 30 days’ notice before adding one.
- Help you answer data subject requests and complete impact assessments.
- Notify you of a personal data breach without undue delay, and within 72 hours of becoming aware.
- Delete or return data at the end of the agreement, within 30 days.
- Make available the information needed to show compliance, and allow one audit a year on reasonable notice.
4. Your obligations
- Have a lawful basis for the data you send us.
- Tell shoppers in your own privacy notice that an AI assistant may handle their messages.
- Set a retention period and keep it under review.
- Do not paste special-category or payment card data into a conversation.
5. International transfers
Primary storage is in the EU (Frankfurt). Transfers outside the UK/EEA rely on adequacy decisions or Standard Contractual Clauses, which are incorporated here by reference.
6. Accepting this DPA
This DPA applies automatically when you accept the Terms. If your legal team needs a signed copy, email legal@baarre.com.