Last Updated: June 2026

This Data Processing Agreement (“DPA”) forms part of the Terms of Service between ElevenCart Ltd (“Controller”, “we”, “our”, or “us”) and any customer, vendor, service provider, or business partner (“Processor” or “Data Subject”) who provides or receives personal data through our website and services.

This DPA is intended to ensure compliance with applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR), UK GDPR, and other applicable privacy laws.

1. Purpose

The purpose of this Agreement is to establish the responsibilities and obligations of the parties regarding the processing of personal data collected through our website and related services.

2. Definitions

For the purposes of this Agreement:

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion.

Controller means the entity that determines the purposes and means of processing personal data.

Processor means the entity that processes personal data on behalf of the Controller.

3. Categories of Data Processed

We may process the following categories of personal data:

• Full name
• Email address
• Telephone number
• Billing address
• Shipping address
• Payment-related information
• IP address
• Device and browser information
• Order history
• Customer support communications

4. Purpose of Processing

Personal data may be processed for the following purposes:

• Order fulfillment
• Customer account management
• Payment processing
• Shipping and delivery services
• Customer support
• Fraud prevention and security
• Website functionality and analytics
• Legal and regulatory compliance
• Marketing communications where consent has been provided

5. Processing Instructions

Any Processor acting on behalf of ElevenCart Ltd shall:

• Process personal data only in accordance with documented instructions.
• Ensure confidentiality of personal data.
• Implement appropriate technical and organizational security measures.
• Not disclose personal data to unauthorized third parties.
• Assist with compliance obligations where required by law.

6. Security Measures

We maintain appropriate safeguards designed to protect personal data against:

• Unauthorized access
• Accidental loss
• Destruction or damage
• Alteration
• Disclosure
• Misuse

Security measures may include:

• Secure hosting environments
• SSL encryption
• Access controls
• Password protection
• Data backup procedures
• Monitoring and security reviews

7. Sub-Processors

We may engage trusted third-party service providers to assist with:

• Website hosting
• Payment processing
• Shipping and logistics
• Customer communication
• Analytics and performance monitoring

Where applicable, such providers are required to maintain appropriate data protection standards.

8. International Data Transfers

Personal data may be transferred to and processed in countries outside the user’s jurisdiction where necessary for the provision of services.

Where required by law, appropriate safeguards will be implemented to protect transferred data.

9. Data Retention

Personal data will be retained only for as long as necessary to:

• Provide services
• Fulfill contractual obligations
• Meet legal requirements
• Resolve disputes
• Enforce agreements

Upon expiration of the retention period, data may be securely deleted or anonymized.

10. Data Subject Rights

Subject to applicable law, individuals may have the right to:

• Access their personal data
• Correct inaccurate information
• Request deletion of personal data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent where processing is based on consent

Requests may be submitted using the contact information provided below.

11. Data Breach Notification

In the event of a personal data breach that may affect users’ rights and freedoms, we will take appropriate action and provide notifications where required by applicable law.

12. Compliance

Both parties agree to comply with all applicable data protection and privacy laws governing the processing of personal data.

13. Amendments

We reserve the right to amend this Data Processing Agreement to reflect changes in legal requirements, business operations, or data processing activities.

Updated versions will be published on our website.

14. Contact Information

For questions regarding this Data Processing Agreement or data protection matters, please contact:

ElevenCart Ltd
Email: support@elevencartltd.site
Website: https://elevencartltd.site

By using our website and services, you acknowledge and agree to the terms of this Data Processing Agreement.