DATA PROCESSING AGREEMENT (DPA)

(DOCBOON Platform)

1. INTRODUCTION

This Data Processing Agreement (“Agreement”) governs the processing of personal data by Sellers on the DOCBOON Platform.

This Agreement forms an integral part of the Seller Agreement.

By onboarding and using the Platform, the Seller agrees to comply with this Agreement.

2. ROLE OF PARTIES

• DOCBOON acts as a Data Fiduciary under applicable laws
• Seller acts as:
• Data Processor, and/or
• Independent Data Fiduciary (where applicable)

depending on nature of data use

3. SCOPE OF DATA PROCESSING

Seller shall process personal data only for:

• Order fulfillment
• Delivery coordination
• Customer support related to transactions
• Regulatory and compliance requirements

No other use is permitted.

4. TYPES OF DATA

Data may include:

• Name
• Contact details
• Address
• Order details
• Transaction-related information

5. PURPOSE LIMITATION 

Seller shall:

• Use data strictly for permitted purposes
• Not use data for:
• Marketing
• Resale
• Profiling
• Cross-selling

without explicit authorization

6. DATA SHARING RESTRICTIONS

Seller shall not:

• Share buyer data with third parties
• Transfer data outside authorized channels

except:

• Logistics partners (only as necessary)
• Regulatory authorities (as required by law)

7. DATA SECURITY OBLIGATIONS

Seller shall implement:

• Reasonable technical safeguards
• Access controls
• Secure storage systems

Seller must prevent:

• Unauthorized access
• Data leakage
• Data misuse

8. CONFIDENTIALITY

Seller shall:

• Treat all data as confidential
• Restrict access to authorized personnel only

9. DATA RETENTION & DELETION

Seller shall:

• Retain data only as long as necessary
• Delete or anonymize data after purpose completion

unless required by law

10. DATA BREACH OBLIGATION 

Seller shall

• Notify DOCBOON immediately (within 24 hours) in case of breach
• Provide full details of incident
• Cooperate in mitigation

11. AUDIT & INSPECTION RIGHTS

DOCBOON reserves the right to:

• Audit Seller data practices
• Request compliance evidence

Seller must cooperate fully.

12. SUB-PROCESSING

Seller shall not appoint sub-processors without:

• Prior approval from DOCBOON

Seller remains fully liable for sub-processors.

13. USER RIGHTS HANDLING

Seller shall:

• Assist DOCBOON in handling:
  • Data access requests
  • Correction requests
  • Deletion requests

14. CROSS-BORDER TRANSFER

Seller shall not transfer data outside India unless:

• Legally permitted
• Approved by DOCBOON

15. LIABILITY & INDEMNITY

Seller shall be fully liable for:

• Data misuse
• Unauthorized processing
• Breach of this Agreement

Seller agrees to indemnify DOCBOON from:

• Regulatory penalties
•  Legal claims
• Third-party damages

16. LIMITATION OF LIABILITY

DOCBOON shall not be liable for:

• Seller’s data misuse
• Security failures at Seller’s end

17. TERMINATION

• Upon termination:
  Seller must immediately stop data processing
• Delete all data (unless legally required to retain)

18. SURVIVAL

Clauses relating to:

• Confidentiality
• Liability
• Indemnity

shall survive termination

19. GOVERNING LAW

This Agreement shall be governed by laws of India.

Jurisdiction: Courts at Ambala, Haryana.

20. ACKNOWLEDGMENT

By onboarding, the Seller:

• Accepts this Agreement
• Confirms compliance obligations
•  Assumes responsibility for data handling