Bukza Data Processing Agreement (DPA)

Last Updated: 12 July 2025

Effective automatically for all business clients - no signature required.

This Data Processing Agreement ("DPA") is entered into between:

Bukza Pte. Ltd., 68 Circular Road #02-01, Singapore 049422 (UEN: 202441730M) ("Bukza", "Processor")
You, as a Business User of Bukza's services ("Customer", "Controller")

Each a "Party", collectively the "Parties".

This DPA supplements the Bukza Terms of Service ("Principal Agreement") and governs Bukza's processing of Personal Data on behalf of the Customer in the course of providing Bukza's SaaS booking platform and related services ("Service"). In case of conflict, this DPA prevails over the Principal Agreement.

1. Definitions

Data Protection Law includes GDPR, UK GDPR, Singapore PDPA, Thailand PDPA, Japan APPI, Taiwan PDP Act, and other applicable data privacy laws.

Personal Data, Processing, Controller, Processor, and related terms have the meanings set forth in applicable laws.

2. Scope and Role of the Parties

For End User and employee data: Customer is the Controller, Bukza is the Processor.
For business account data: Bukza is the Controller.

If any instruction from the Customer violates applicable law, Bukza will promptly notify the Customer.

3. Details of Data Processing

Subject Matter: Bukza SaaS booking service
Duration: Duration of account + 6 months
Purpose: Booking, payments, support, notifications
Data Subjects: Customer employees, End Users
Types of Data: Name, email, phone, IP, locale, browser data, booking info, optional messaging IDs or webhooks, transaction metadata exchanged via the Payments API (custom identifiers, payment status, timestamps, etc.)

4. Customer Responsibilities

Comply with all Data Protection Laws
Provide privacy notices, obtain consent
Do not submit sensitive data
Assume responsibility for embedded third-party code
Ensure that any custom payment system integrated via Payments API is secure, compliant with applicable laws, and does not transmit sensitive or special categories of personal data without lawful basis.
Assume full responsibility for the configuration and legality of any data sent to third-party endpoints via outbound web requests or webhook templates.

5. Bukza's Obligations

Process data under Customer's instructions only
Maintain confidentiality agreements
Implement encryption, access control, audit logs
Assist with data subject requests
Assist with DPIAs and compliance (at Customer's expense)
Delete or return data within 6 months of termination
Provide audit support; may use SOC 2/ISO reports in lieu of onsite audit

6. Subprocessors

Customer authorizes Bukza to use Subprocessors as reasonably necessary to deliver the Service.

The list of authorized Subprocessors is available at: https://bukza.com/subprocessors.

This list may be updated from time to time. Bukza will notify the Customer of any intended changes regarding new or replacement Subprocessors, providing at least 14 days' notice. The Customer may object in writing within this period. If no resolution is found, the Customer may terminate the affected Service and receive a pro-rated refund.

Bukza will impose data protection obligations on each Subprocessor that are no less protective than those in this DPA.

7. International Data Transfers

Transfers are protected by SCCs (for EU/UK) or equivalent measures for APPI, PDPA, PDP Act.

8. Personal Data Breach

Notify Customer within 72 hours
Provide relevant breach details
Assist in remediation (at Customer's cost if applicable)

9. Liability

Subject to limitations in the Principal Agreement. Data Subjects retain all legal rights.

10. Term and Termination

This DPA remains in effect as long as Bukza processes Personal Data for the Customer.

11. Miscellaneous & Jurisdiction

Governing law: Singapore
Exclusive jurisdiction: Singapore courts
All notices: support@bukza.com

12. Standard Contractual Clauses (SCCs)

For GDPR/UK GDPR: SCCs are incorporated by reference and govern international transfers.

13. Updates

Bukza may update this DPA. Material changes will be communicated via Service or email.

14. Contact

Email: support@bukza.com

Bukza Pte. Ltd., 68 Circular Road #02-01, Singapore 049422