Data processing agreement

When your shop runs on Shearlane, your client data (names, phone numbers, visit history, notes) is yours. You are the controller; ⁦WiseRock⁩ processes it on your instructions. This page summarizes the data processing agreement (DPA) every shop can sign with us at product onboarding.

The commitments

• Purpose-bound processing. We process shop and client data only to provide Shearlane, never for advertising, resale, or a marketplace.
• EU hosting. Product data is hosted in the EU (Frankfurt). Where a subprocessor transfers data outside the EEA, standard contractual clauses apply.
• Subprocessors. A current list (hosting, messaging, payments) ships with the DPA; we announce changes in advance so you can object.
• Security. Encryption in transit and at rest, access controls, and breach notification without undue delay.
• Export and deletion. You can export your client data as CSV at any time, and on termination we delete it, genuinely, within the retention window stated in the DPA.
• Assistance. We help you answer data-subject requests (access, erasure) that land on your shop.

Getting the signed DPA

The full, signable document is available from onboarding onward. Request it any time at ⁦[CONTACT_EMAIL]⁩. Until the product launches, this website itself stores only the lead data described in the privacy policy.