top of page

Data Processing Agreement

Data Processing Agreement for Cart Push'r LLC

Effective Date: [3/13/2026]
 

Data Processing Agreement (DPA)

This Data Processing Agreement (“DPA”) is entered into by and between Cart Push'r LLC (“Processor”) and the Client (“Controller”).
 

 

1. Scope

This DPA governs the processing of data by Cart Push'r on behalf of the Client in connection with the services provided.
 

 

2. Nature of Processing

Cart Push'r processes data to:

  • Detect cart abandonment events

  • Deliver push notifications

  • Track engagement and conversions

  • Provide reporting and analytics
     

 

3. Types of Data Processed

  • Device and browser information

  • Anonymous identifiers (push tokens)

  • Interaction and behavioral data

  • Cart activity (non-PII)

Cart Push'r does not require personally identifiable information (PII) such as names or email addresses to operate its core services.
 

 

4. Roles of the Parties

  • Client = Data Controller

  • Cart Push'r = Data Processor
     

 

5. Processor Obligations

Cart Push'r agrees to:

  • Process data only on documented instructions from the Client

  • Implement appropriate security measures

  • Ensure confidentiality of data

  • Assist with compliance obligations where applicable
     

 

6. Subprocessors

Cart Push'r may engage third-party subprocessors (e.g., hosting providers) to support its services.

All subprocessors will be bound by data protection obligations.
 

 

7. Data Security

Cart Push'r implements technical and organizational safeguards to protect data against unauthorized access, loss, or misuse.
 

 

8. Data Subject Rights

To the extent applicable, Cart Push'r will assist the Client in responding to requests related to:

  • Access

  • Deletion

  • Restriction of processing
     

 

9. Data Retention

Data is retained only as long as necessary to provide services and meet legal obligations.
 

 

10. International Transfers

Where applicable, Cart Push'r ensures appropriate safeguards for international data transfers.
 

 

11. Breach Notification

Cart Push'r will notify the Client without undue delay upon becoming aware of a data breach affecting processed data.
 

 

12. Termination

Upon termination of services, Cart Push'r will delete or return data as requested, unless retention is required by law.
 

 

13. Governing Law

This DPA shall be governed by the laws of Pennsylvania, United States.
 

 

14. Contact

Cart Push'r LLC
info@cartpushr.com

bottom of page