Last updated 25 September 2026
Data Processing Terms (Processor Schedule)
These terms apply where a service provider ("Processor") processes personal data on behalf of Busty Boob Tape Ltd ("Controller"), as required by Article 28 UK GDPR. They may be incorporated into supplier agreements by reference.
1. Subject matter and duration
Processing of wholesale customer personal data for the purposes of hosting, payments, delivery, email or accounting services, for the term of the service agreement.
2. Processor obligations
The Processor shall: process personal data only on documented instructions of the Controller; ensure staff are bound by confidentiality; implement appropriate technical and organisational security measures (Article 32); engage sub-processors only with prior general written authorisation and on equivalent terms; assist the Controller with data subject requests, security, breach notification, DPIAs and consultations; notify personal data breaches without undue delay and within 24 hours of becoming aware; delete or return all personal data at the end of the services; and make available information needed to demonstrate compliance, including allowing audits.
3. International transfers
No transfer outside the UK unless covered by UK adequacy regulations or the UK IDTA / Addendum.
4. Categories
Data subjects: Buyer contacts and users. Data: names, business contact details, delivery addresses, order and payment status, uploaded photographs, log data.
5. Law
Governed by the law of England and Wales.