Data Processing Agreement

This Data Processing Agreement forms part of the Operator Terms. It applies where the operator is controller and Wagify processes personal data as processor to provide the Wagify platform.

• Subject matter: booking, scheduling, client, pet, staff, messaging, website, reporting, invoicing, payment status, support, and operational management records.
• Duration: for the term of the operator account and any legally required retention, deletion, export, backup, or dispute period.
• Data subjects: operators, team members, clients, guests, emergency contacts, staff, website visitors, and support contacts.
• Data categories: contact details, account identifiers, booking records, pet care information, messages, invoices, payment metadata, support records, access notes, key logs, and technical data.

• Process operator personal data only on documented instructions unless legally required otherwise.
• Use appropriate technical and organisational measures for confidentiality, integrity, availability, and resilience.
• Ensure personnel with access are under confidentiality obligations.
• Assist with data subject rights, security incidents, DPIAs, and controller obligations where reasonably possible.
• Delete or return processor data at the end of service unless law requires retention.

• Give lawful processing instructions and keep client-facing privacy information accurate.
• Ensure data entered into Wagify is necessary, accurate, lawful, and proportionate.
• Configure team permissions, website publication, client access, exports, and integrations responsibly.
• Respond to client rights requests and complaints where the operator is controller.

Wagify may use subprocessors listed in the Subprocessor List. We will take reasonable steps to ensure subprocessors are under appropriate data protection terms.

International transfers will use an appropriate safeguard where required, such as the UK International Data Transfer Agreement, UK Addendum, adequacy regulations, or another lawful mechanism.