Data Processing Agreement
Version 2026-08-01
How Tokolane handles the personal data of your shoppers. You are the controller of that data; Tokolane processes it on your instructions.
Roles
For shopper data — names, email addresses, order history — you are the controller and Tokolane is your processor. For your own merchant account data, Tokolane is the controller.
What is processed
- Shopper name and email address, collected at checkout.
- Order contents, totals, and status.
- Merchant team member names, email addresses and roles.
Card details are never processed by Tokolane — they go directly to Stripe.
Sub-processors
- Cloudflare — application hosting and network delivery.
- Neon — the PostgreSQL database where store data is held.
- Clerk — merchant authentication.
- Stripe — payment processing and merchant identity verification.
Changes to this list are notified in advance, with an opportunity to object. [Counsel: fix the notice period.]
Security
Data is encrypted in transit and at rest. Access is limited to personnel who need it. Personal data breaches are notified without undue delay. [Counsel / engineering: state the actual notification window and the measures being warranted.]
Location and transfers
Store data is held in the database region configured for your account. Where personal data leaves the UK or EEA, transfers rely on the appropriate safeguards. [Counsel: attach Standard Contractual Clauses and the UK Addendum.]
Your shoppers' rights
The dashboard lets you access, export, correct and delete a shopper's data so you can answer access and erasure requests. Tokolane assists with requests that reach us directly.
Retention and deletion
Data is retained while your store is open. After termination it is available for export for a stated window, then deleted — except where law requires us to keep it.