Data Processing Agreement
How BOKAH handles personal data for a club or organizer running a campaign.
Last updated
In Plain English
- This page applies when a club or organizer collects member details through BOKAH.
- The organizer decides who joins. BOKAH uses the details only to take and fulfil orders.
- We name every provider that receives member data.
- BOKAH's own site analytics are covered by the Privacy page, not this one.
Two Roles
For campaign member data, BOKAH is the processor and the organizer is the controller. The organizer decides who joins their campaign and what happens to that roster.
For this site's own analytics, BOKAH is the controller. The Privacy page covers that.
What We Process
On a club's behalf we process each buyer's first and last name, garment size and optional email, plus the payment and referral details attached to the order.
We do not record who physically taps a garment or scans its QR code.
Who Receives the Data
These providers handle member data on our behalf.
- Cloudflare hosts the site and stores campaign and order records. Uploaded artwork sits in Cloudflare R2.
- Stripe takes payment. Checkout sends it the buyer's name, garment size, email, order references and payment details.
- Resend sends order receipts by email.
Retention and Deletion
We keep campaign and order records while they are needed to run the campaign and fulfil orders. We keep order records as long as tax rules require, with personal details reduced to name, address, amount, date and payment reference.
A member or organizer can ask for deletion through the Privacy page.
Security
Payments go through Stripe Checkout. We store payment references, never card details.
Breach Notification
If we learn of unauthorized access to a campaign's member data, we tell affected organizers without undue delay once we understand the scope. We say what happened and what to do next.
Organizer Responsibilities
An organizer who collects names and sizes for a campaign is responsible for having a lawful basis to do so with their own members, such as a club roster or team signup.
Entity and Jurisdiction
This agreement is with BOKAH APPAREL LLC. The laws of the State of Illinois govern it.
Contact
Questions about this agreement go through the contact page.