Draft: under review. This page is a placeholder while our lawyers finish it. It isn't yet the agreement between us.
Data processing agreement
Last updated September 2026
Scope
This agreement applies when a brand gives us personal data to process on its behalf through Vouchernaut for Brands. It sits alongside the terms of service.
Roles
- The brand is the controller of the personal data it shares with us for its reports and pages.
- We are its processor for that data, and act only on the brand's documented instructions.
- We remain the controller of console accounts and shopper data on vouchernaut.com, as the privacy notice describes.
What we process
The categories of data, the people they concern, and how long we keep them will be set out here.
Security
Access is limited to the brand's team by role, sessions are signed and every change is recorded. The full technical and organisational measures will follow.
Sub-processors
The list of sub-processors, and how we tell brands before adding one, will be here.
Breaches, audits and ending
How we report a breach, support audits and return or delete data when the service ends will follow once reviewed.
Contact
Write to us at partners@vouchernaut.com about anything on this page. We aim to answer within five working days.