Data Subject FAQs or Information on Consent

Version	1.0
Effective Date	April 2026
Review Cycle	Annual
Document Owner	Chief Information Security Officer (CISO)
Classification	CONFIDENTIAL — Internal Use Only
Applicable Standard	SOC 2 Type II

1. Purpose

This document provides data subjects with frequently asked questions (FAQs) about how DCKAP Integrator handles personal information, the consent process, and the consequences of not providing consent. This content is published on the DCKAP website and within the product portal.

2. Frequently Asked Questions

Q1: What is DCKAP Integrator and does it hold my personal data?

DCKAP Integrator is a middleware platform used by businesses to connect their software systems (e.g., online stores and accounting/ERP systems). If you are a consumer who placed an order with a business that uses DCKAP Integrator, your order details (name, address, email) may pass through DCKAP Integrator as part of that business’s order processing. DCKAP does not retain your data after it has been delivered to the destination system. DCKAP is not your data controller — the business you purchased from is.

Q2: Did I consent to DCKAP Integrator processing my data?

When you accepted the privacy policy of the business you transacted with (e.g., when you checked out on their website), that business obtained the necessary consent or established the legal basis to process your data using their service providers — including DCKAP Integrator. DCKAP processes your data only as instructed by that business (the Data Controller) under a Data Processing Agreement.

Q3: What happens if I withdraw consent or object to processing?

Your rights regarding consent withdrawal or objection to processing should be directed to the business (Data Controller) whose website or services you used. They are responsible for honouring your privacy rights. If your request relates specifically to data held by DCKAP (e.g., you are a customer of DCKAP’s portal), you can contact us at privacy@dckap.com. We will respond within 30 days.

Q4: What personal data does DCKAP Integrator hold about me?

For end consumers: DCKAP Integrator holds your data only transiently during the sync process (typically seconds to minutes). We do not retain order or consumer data beyond 24 hours. For portal users (business accounts): we hold your name, work email, login activity, and configuration actions for the duration of your account. See our Privacy Notice for full details.

Q5: What if I don’t consent to DCKAP’s marketing emails?

Marketing communications from DCKAP require explicit opt-in consent. If you do not provide consent, you will not receive marketing emails. This has no impact on the delivery of the integration service to your organisation.

Q6: Can I request deletion of my personal data?

Yes. If you are a DCKAP portal user, you can request deletion of your account data by emailing privacy@dckap.com. We will process erasure requests within 30 days, subject to legal retention obligations (e.g., financial records). For end-consumer data that passed through DCKAP Integrator, please contact the business you transacted with — they are the Data Controller.

Q7: Does DCKAP share my data with third parties?

DCKAP uses sub-processors (cloud infrastructure providers) to deliver its service. A current list of sub-processors is available at dckap.com/sub-processors. DCKAP does not sell personal data. Data is shared with third parties only where required to deliver the contracted service or comply with legal obligations.

Q8: How do I contact DCKAP about a privacy concern?

Email: privacy@dckap.com | Postal: [DCKAP registered address]. We aim to respond to all privacy enquiries within 5 business days and to resolve them within 30 days.

3. Placement in Product

Product Location	Screen / Page	Audience
Public Website	dckap.com/privacy/faqs	All Data Subjects
Product Portal	Help → Privacy FAQs	Portal Users
Cookie Banner	Link from consent banner: ‘Learn more’	Website Visitors
Support Portal	Knowledge Base → Privacy and Your Data	Customers and End Users
Compliance Folder	SOC 2 Evidence → Privacy Transparency	External Auditors