Skip to content
Apply

Legal · last updated 1 October 2026

Data processing terms

Where the seller is the controller and we are the processor — scope, instructions, sub-processors, and what happens at the end.

Draft. This describes what the software actually does and what we intend to be bound by, but it has not been reviewed by a lawyer in any jurisdiction. Read it as a statement of practice rather than a reviewed agreement, and raise anything that matters to you before you rely on it.

Scope

These terms apply where we process personal data on behalf of a seller — in practice, the personal data of that seller's customers. They form part of the terms of service.

The seller is the controller. Cha-Ching is the processor. Where a call centre is engaged by the seller through the platform, the centre is a sub-processor for the shops assigned to it.

Subject matter

ItemDetail
PurposeConfirming cash-on-delivery orders by telephone before dispatch, and operating the order lifecycle that follows.
DurationWhile the seller's account is open, plus the retention described below.
Data subjectsThe seller's customers, and the seller's own staff users.
CategoriesName, telephone number, delivery address, order contents and value, call records and outcomes.
Special categoriesNone. The platform does not ask for any and should not be used to store any.

Our obligations

  • Process only on the seller's documented instructions. Configuring the product is how those instructions are given.
  • Keep staff with access under confidentiality.
  • Apply appropriate technical and organisational measures — see the security page, which is specific about both what we do and what we do not claim.
  • Help the seller answer data-subject requests and meet their own obligations.
  • Tell the seller without undue delay on becoming aware of a personal data breach, with what we know at the time rather than waiting for a complete picture.
  • Delete or return the data at the end, except where law requires retention.
  • Make available the information needed to demonstrate compliance, and allow an audit on reasonable notice.

Sub-processors

WhoWhat forWhere
Hosting and database providerRunning the application and storing its dataEuropean Union
Email providerTransactional email, where SMTP is configuredEuropean Union
The call centre the seller engagesMaking the confirmation calls, for assigned shops onlyThe centre's own country

We will give notice before adding or replacing a sub-processor, and the seller may object. A call centre is only ever added as a sub-processor by the seller's own act of engaging it, and is removed the moment that engagement ends.

Transfers

A call centre may be in a different country from the seller — that is a normal and intended arrangement here. Where a transfer leaves the EEA it is covered by standard contractual clauses, and the shops a centre may reach are limited to those the seller has assigned.

At the end

Ninety days to export, then deletion — except commission entries, invoices and the audit trail, which are retained for seven years as financial and dispute records belonging to more than one party.