Last updated: March 1, 2026
This Data Processing Agreement (DPA) outlines how RedCart processes personal data on behalf of our customers.
1. Definitions
- Data Controller: You (the customer)
- Data Processor: RedCart
- Personal Data: Any information relating to identified or identifiable individuals
2. Data Processing Activities
- Storing customer information and order data
- Processing payments and transactions
- Generating analytics and reports
- Providing customer support
- Managing loyalty programs and rewards
3. Subprocessors
We use trusted third-party providers to help deliver our services. All subprocessors are contractually obligated to maintain data security and privacy standards.
4. Data Security Measures
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication
- Incident response and breach notification
5. Data Subject Rights
We assist you in responding to data subject requests, including access, rectification, deletion, and portability requests.
6. Data Retention
We retain data as long as your account is active, and for a reasonable period thereafter to comply with legal obligations.
7. International Transfers
Data may be transferred to countries outside your jurisdiction. We ensure appropriate safeguards are in place for such transfers.
For questions about this agreement, contact .