Data Processing Agreement

Last updated 1 November 2026

This agreement under Art. 28 GDPR applies between the Merchant installing wcag.tech EU Compliance (controller) and WS SOLUTIONS LLC, 5830 E 2nd St, Ste 7000 #31413, Casper, WY 82609, USA (processor). It forms part of the Terms of Service.

1. Subject and duration

Processing of shoppers' personal data to provide the withdrawal function and related e-mails, for as long as the App is installed plus 30 days.

2. Nature and purpose

Collecting withdrawal declarations, storing them, sending the confirmation of receipt and the notice to the Merchant, checking the order number against the Merchant's Wix orders, and providing the log and export.

3. Data and data subjects

Shoppers of the Merchant: name, e-mail address, order number, items, optional reason, time of receipt, IP address (deleted after 24 hours).

4. Instructions

We process the data only on the Merchant's documented instructions, which are the App's settings and functions, unless required otherwise by law.

5. Confidentiality and security

Persons with access are bound to confidentiality. Technical and organisational measures: encrypted transport (TLS), access limited to the operator via SSH keys, isolated application service with least privileges, encrypted backups, signed requests from Wix, rate limiting, deletion routines.

6. Sub-processors

Google Cloud (hosting), Brevo (e-mail delivery). The Merchant authorises these; we will announce changes in advance on this page, and the Merchant may object by uninstalling the App.

7. Assistance

We assist the Merchant with data subject requests, security incidents (notified without undue delay) and data protection impact assessments, as far as our processing is concerned.

8. Deletion

Data is deleted 30 days after the App is uninstalled, unless law requires storage.

9. Audits

We make available the information needed to demonstrate compliance and allow reasonable audits on request to wssolutionsllc@zohomail.eu.