Data processing agreement

Parties and subject

Last updated 31 October 2026.

This DPA is between the merchant (controller) and Product VISTA (processor) for TrustNPS.

Subject: sending NPS surveys to the merchant's paying customers, storing the answer, and publishing an aggregate score. Duration: while the merchant account exists, plus the retention periods in the privacy policy. Nature: email and statistics on the merchant's instructions, which are the product settings and this DPA.

Data

Buyer email, order time, delivery time when the provider reports it, score from 0 to 10, and an optional comment. No special-category data is requested. Do not put special-category data in a comment.

Obligations

We process only on your instructions, keep the data confidential, and encrypt provider credentials and buyer emails. We help you answer access and deletion requests. We tell you if we become aware of a personal-data breach that affects your buyers.

You warrant that you have a lawful basis to let us email those buyers, and you attest to that before the first send. You honour your own customers' opt-outs. When a recipient unsubscribes, that opt-out is global: we stop survey email to that address from every merchant on TrustNPS.

At the end of the service we delete buyer emails with the business, or sooner if you delete the business or the buyer asks for erasure. Erasure deletes the email and the comment. The numeric score stays only as an anonymous part of the aggregate.

Subprocessors and transfers

We use the subprocessors listed on the subprocessors page. We will update that page before adding a subprocessor who receives buyer emails. If you object on reasonable data-protection grounds, you may stop using the service.

International transfers use the subprocessor's Standard Contractual Clauses or an adequacy decision. You can ask us for the current mechanism.

You may ask, once a year and with reasonable notice, for a summary of our security measures. We do not promise an on-site audit of a subprocessor's data centre.

How this DPA applies

Creating a business and checking the lawful-basis box incorporates this DPA. A signed PDF can be requested by email. A lawyer for either side may still want a countersigned copy. That is noted for the founder, not hidden from you.