Data Processing Agreement

1. Parties and Scope

This Agreement is between Zeiore Interactive, a sole proprietorship operating the Salore platform ("Salore", "Processor", "we" or "us"), and the salon, beauty parlour, spa or other business organisation using Salore ("Customer" or "Business").

This Agreement applies to personal data processed by Salore on behalf of the Customer in connection with the provision of its software and related services.

This DPA supplements the Salore Terms of Service and Privacy Policy. Where this DPA conflicts with the Terms of Service concerning the processing of Customer Data, this DPA will prevail to the extent of that conflict.

2. Roles of the Parties

The Customer generally determines the purposes for which personal data relating to its customers, employees and business contacts is collected and used through Salore.

For such processing, the Customer acts as the Data Fiduciary or equivalent responsible entity under applicable data protection law, and Salore acts as its Data Processor.

Salore may separately act as a Data Fiduciary for personal data relating to its own account holders, billing contacts, website visitors and business relationships. Such processing is governed by the Salore Privacy Policy.

3. Categories of Personal Data

Depending on how the Customer uses Salore, processed information may include:

Customer information

• Names and contact details.
• Phone numbers and email addresses.
• Birthdays and customer preferences.
• Appointment and visit history.
• Services purchased and transaction information.
• Notes entered by authorised business users.

Employee and staff information

• Staff names and contact information.
• Designations and assigned services.
• Schedules and appointment assignments.
• Work-related activity and records.

Business and transaction information

• Invoices and payment records.
• Billing information and transaction history.
• Business and branch details.
• GST and other tax-related information.

4. Purpose of Processing

Salore processes Customer Data only as necessary to provide and maintain the services, including:

• Storing and managing customer and staff records.
• Managing appointments and walk-in visits.
• Generating invoices and maintaining payment records.
• Providing reports, dashboards and business insights.
• Maintaining account access and organisational permissions.
• Providing technical support and troubleshooting.
• Maintaining security, backups and service reliability.
• Meeting applicable legal obligations relating to the services.

5. Customer Instructions

Salore will process Customer Data in accordance with the Customer's documented instructions, this Agreement and the applicable service terms.

The Customer is responsible for ensuring that its instructions and use of the platform comply with applicable data protection and privacy laws.

If Salore believes an instruction violates applicable law, we may notify the Customer and request clarification or revised instructions.

6. Confidentiality

Salore will take reasonable steps to ensure that individuals authorised to access Customer Data are subject to appropriate confidentiality obligations.

Customer Data will not be disclosed to unauthorised individuals or used for purposes unrelated to providing the services, except where required by law.

7. Security Measures

Salore will implement reasonable technical and organisational safeguards designed to protect Customer Data.

Depending on the service and infrastructure, these may include:

• Authentication and access controls.
• Organisation-level data separation.
• Secure communication protocols.
• Database access restrictions.
• Security monitoring and error logging.
• Data backups and recovery procedures.
• Appropriate administrative safeguards.

Salore will periodically review its security practices and make reasonable improvements as the platform develops.

8. Sub-processors

The Customer authorises Salore to engage third-party service providers where reasonably necessary to operate the platform.

Such providers may include hosting, cloud infrastructure, database, security, payment processing and technical support providers.

Salore will take reasonable steps to ensure that relevant sub-processors are subject to appropriate confidentiality, security and data protection obligations.

Salore remains responsible for its contractual obligations concerning the processing carried out by its sub-processors, to the extent required by applicable law.

9. Data Subject Requests

The Customer is responsible for handling requests from individuals whose personal information is stored through its Salore account, including requests for access, correction, erasure and grievance resolution.

Where reasonably necessary and legally permissible, Salore will provide assistance to the Customer in responding to such requests.

Salore may require the Customer to verify its authority before acting on instructions concerning Customer Data.

10. Personal Data Breaches

If Salore becomes aware of a personal data breach affecting Customer Data, we will notify the affected Customer without undue delay, subject to applicable law and the information reasonably available at the time.

Where reasonably possible, the notification will include:

• A description of the known incident.
• The categories of information potentially affected.
• Known or reasonably suspected consequences.
• Measures taken or proposed to address the incident.

The Customer remains responsible for fulfilling its own statutory notification obligations, including notifications to affected individuals and authorities where required.

11. Data Retention and Deletion

Salore retains Customer Data for as long as necessary to provide the subscribed services and fulfil applicable contractual and legal obligations.

Following account termination, the Customer may request access to or deletion of its Customer Data, subject to applicable retention requirements.

Salore may retain certain information where required for tax, financial, security, dispute resolution or other legal purposes.

Information retained in backups may remain until the applicable backup retention cycle expires, subject to appropriate safeguards.

12. Data Transfers

Customer Data may be processed or stored using infrastructure operated by Salore or its service providers.

Where information is transferred outside India, such transfers will be handled in accordance with applicable Indian data protection requirements and any applicable restrictions.

13. Customer Responsibilities

The Customer agrees to:

• Collect and use personal data lawfully.
• Provide appropriate privacy notices to individuals.
• Obtain valid consent or establish another lawful basis where required.
• Ensure that information entered into Salore is accurate and relevant.
• Restrict access to authorised employees and users.
• Maintain appropriate internal privacy and security practices.
• Respond to requests and grievances from individuals as required by law.
• Notify Salore of any instructions or requirements affecting data processing.

14. Assistance and Cooperation

Taking into account the nature of processing and information available to Salore, we will provide reasonable assistance to the Customer in meeting applicable data protection obligations relating to Customer Data.

Such assistance may include responding to reasonable enquiries concerning security, data handling, deletion and incident management.

15. Audits and Compliance Information

Upon reasonable written request, Salore may provide relevant information about its data protection and security practices to help the Customer assess compliance.

Any audit or inspection must be reasonably scheduled, limited to relevant processing activities and conducted without compromising the security or confidentiality of other customers.

16. Term and Termination

This Agreement remains effective while Salore processes Customer Data on behalf of the Customer.

Upon termination of the underlying services, the provisions relating to confidentiality, data retention, deletion and applicable legal obligations will continue to apply as necessary.

17. Governing Law

This Agreement is governed by the laws of India.

Subject to applicable law and statutory jurisdiction, courts in Mumbai, Maharashtra shall have jurisdiction over disputes arising under this Agreement.

18. Changes to This Agreement

We may update this Agreement to reflect changes in our services, security practices or applicable legal requirements. Updated versions will be published on the Salore website.