Data processing agreement

This agreement governs the relationship between the Dealer, as controller of the personal data it enters into the panel (customers, sellers, staff and partners), and the Platform as its processor.

The Platform's duties

• It processes the data only on the Dealer's instructions and as the service requires.
• It binds the staff who reach the data to confidentiality.
• It takes fitting technical and organisational measures: separation between dealers, encryption of sensitive fields, access records, backups.
• Where it uses a sub-processor (hosting, message delivery) it passes the same duties on.
• On learning of a data breach it informs the Dealer without delay.

The Dealer's duties

• It collects the data lawfully, informs the people concerned and obtains the consents needed.
• It gives its users only the permissions their work needs.

Support access

The Platform team enters the Dealer's panel only if the Dealer allows support access, and with a written reason; each visit is reported to the Dealer's owner and written to the activity log.

When the agreement ends

The Dealer can export its data. After the account is closed the data is deleted or anonymised, subject to what the law requires to be kept.