Terms for how SeraFox processes your customers' personal data.
Roles
For personal data of your customers and visitors that you collect through your store, you are the controller and SeraFox is your processor.
Our commitments
We process this data only on your documented instructions (which include using the Service as designed); keep it confidential; apply appropriate technical and organisational security measures; help you respond to data-subject requests and meet your security and breach obligations; and delete or return it when you close your account, unless law requires us to keep it.
Sub-processors
You authorise us to use sub-processors for hosting, database, email delivery, payments and monitoring. We bind them to equivalent data-protection obligations and remain responsible for them. We will give notice of material changes to the list.
Breach notification
We will notify you without undue delay after becoming aware of a personal-data breach affecting your data.
International transfers and audits
Where data is transferred internationally we rely on appropriate safeguards. On reasonable request we will provide information needed to show compliance with this addendum.
This document is provided for information and does not replace advice from a qualified lawyer about your own obligations.