Data processing agreement
Template pending legal review. Last updated 20 July 2026.
For the personal data a shop holds about its consignors and buyers, the shop is the controller and ConsignLoop is the processor. In that role ConsignLoop:
- processes personal data only to provide the service;
- keeps it in UK/EU-hosted databases;
- uses only the sub-processors listed in the privacy policy (Vercel, Neon, Stripe, Resend) under their own data protection terms;
- applies the technical measures described on the security page;
- assists shops with subject access and erasure requests through built-in tools;
- notifies affected shops without undue delay if a personal data breach occurs;
- deletes or returns personal data when a shop closes its account, except records retained by law.