This agreement sets out Karra's role as processor of the business's customer data, and the business's role as controller.
1Roles
The business controls its customer data. Karra processes it on the business's behalf, for the service only.
2Scope of processing
Name, mobile, gender, stamp and visit history — to issue cards, send notifications and produce reports.
3Karra's obligations
Confidentiality, information security, and no use of the data for other purposes.
4Sub-processors
We rely on trusted providers and will notify you of any material change.
5Security incidents
We notify you without undue delay of any incident affecting your customer data.
6End of processing
When the subscription ends, we return or delete the data as you request.