Privacy & Security
Does Saara offer a Data Processing Agreement (DPA)?
Yes. Saara provides a Data Processing Agreement for EcoReturns, EcoShip, EcoTrack, and EcoAgents customers on request. Email [email protected] and the team will share the DPA for review and signature.
By Saara Editorial Team · Updated
Direct answer
Saara offers a Data Processing Agreement covering all its products — EcoReturns, EcoShip, EcoTrack, and EcoAgents. The DPA sets out what personal data is processed, the purposes of processing, security measures, sub-processor commitments, and data-deletion obligations. To receive a copy for review and signature, email [email protected] with your store name and the product you use.
What the DPA covers
The agreement is designed for merchants who process EU/EEA or UK customer data through Saara products.
- Roles: the merchant is the data controller; Saara acts as the data processor.
- Scope: order, customer, and returns data processed to provide the service.
- Security: access controls, encryption in transit, and restricted internal access.
- Sub-processors: the third-party services used to deliver the product, with notice of changes.
- Deletion: personal data is deleted on request or after the relationship ends, within stated timelines.
- International transfers: safeguards for data transferred outside the EU/EEA where applicable.
How to request it
Email [email protected] with the subject line "DPA request" and include your store URL and the Saara product you use. The team responds with the current DPA document. If you also need your account or data deleted, you can submit that separately through the data deletion request page.
Frequently asked questions
Is the DPA available publicly for download?
The DPA is shared directly on request via [email protected] so you always receive the current version for your product and plan.
Which Saara products does the DPA cover?
EcoReturns, EcoShip, EcoTrack, and EcoAgents are all covered.
Do I need a DPA to use EcoReturns on Shopify?
If you process personal data of EU/EEA or UK customers, a DPA with your processor is required under GDPR. Request one before or shortly after installing.