1. Scope
This Addendum applies when Recete Retention Agent processes merchant customer personal data on behalf of a merchant using the service.
2. Roles
- Merchant acts as the controller of customer personal data.
- Recete acts as a processor, handling personal data only on the merchant's behalf.
3. Processing Purposes
- Consent-aware post-purchase WhatsApp workflows
- Customer support conversations and merchant replies
- Product guidance, order-linked context, and merchant analytics
- GDPR export, deletion, and consent-management requests
4. Data Categories
- Customer name
- Customer phone number
- Order and delivery context
- Consent status
- Conversation content
5. Processor Commitments
- Process personal data only for merchant-requested service functionality
- Apply encryption in transit and encryption at rest for sensitive data
- Maintain tenant isolation and role-limited internal access
- Support merchant export, deletion, and consent-management requests
- Notify affected merchants without undue delay after confirming a personal data incident
6. Consent and Opt-out
- The merchant is responsible for obtaining a lawful basis, including consent where required, before customers are messaged on WhatsApp.
- Recete starts scheduled messages only for customers whose Shopify record shows marketing consent, and re-checks consent immediately before each message is sent.
- When a customer opts out (for example by replying STOP), Recete records the opt-out and cancels all messages still scheduled for that customer.
7. Sub-processors
The merchant authorises Recete to use the sub-processors listed in our Privacy Policy, including WhatsApp (Meta Platforms), which carries messages from the merchant's linked WhatsApp account, and OpenAI for AI replies.
8. Contact
For merchant data protection questions, contact legal@recete.co.uk.
Processor legal entity: RECETE LTD, registered in England and Wales. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Company number 17082027.