sochra.com, the public demo and the early-access form don't process personal data on anyone else's behalf. SOCHRA LIMITED (company number 17511908) is the controller for everything the site collects, as set out in our privacy policy. So there is no processor relationship, and no data processing addendum applies to your use of sochra.com.
- What the site processes. Early-access requests you send us, scrambled IP counts that protect the form, the alert and confirmation emails about a request, server and security logs, and advertising data only for the partners you allow. The details are in the privacy policy.
- The public demo. The demo uses example data only. It holds no store, customer or order data from you or anyone else.
- Our providers. The providers that handle this data for us are listed at sochra.com/subprocessors.
- Transfers. Where a provider processes data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum / IDTA, as the privacy policy describes.
- Measures. Encryption in transit (TLS 1.2+) and at rest, access to form entries limited to our team, and DDoS and web application firewall protection at the edge. See sochra.com/security.
Contact: privacy@sochra.com.