Data Processing Agreement (DPA)

Home
>
Legal
>
Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the Terms of Service and Privacy Policy of BeSpoke AI Stylist Private Limited ("BeSpoke", "we", "our", "us") and applies to the extent that we process personal data on behalf of third parties (including B2B clients, affiliates, and vendors).

This Data Processing Agreement ("DPA") forms part of the Terms of Service and Privacy Policy of BeSpoke AI Stylist Private Limited ("BeSpoke", "we", "our", "us") and applies to the extent that we process personal data on behalf of third parties (including B2B clients, affiliates, and vendors).

1. Purpose

This DPA ensures that personal data shared with BeSpoke is handled in compliance with the applicable data protection laws including the EU GDPR, India’s DPDP Act, and other global regulations.

2. Roles Controller:

The entity that determines the purposes and means of the processing of personal data. Processor: BeSpoke, acting on behalf of and under the instructions of the Controller.

3. Responsibilities -

Implement appropriate security measures. - Limit access to authorized personnel. - Promptly inform the Controller of data breaches.

4. Sub-processors

BeSpoke uses vetted sub-processors (e.g., AWS, OpenAI, Google) and ensures they comply with equivalent data protection obligations.

5. Data Subject Rights

Assist Controllers in fulfilling their obligations to respond to data subject access, correction, deletion, and portability requests. 6. Duration This DPA remains valid as long as personal data is processed by BeSpoke under agreement with the Controller.

This Data Processing Agreement ("DPA") forms part of the Terms of Service and Privacy Policy of BeSpoke AI Stylist Private Limited ("BeSpoke", "we", "our", "us") and applies to the extent that we process personal data on behalf of third parties (including B2B clients, affiliates, and vendors).