Data Processing

This page describes how BPLUS PRO LTD engages third parties to process personal data on its behalf, and the safeguards that apply to every engagement.

1. How we engage processors

Every vendor that processes personal data for Kudvi is bound by a written data processing agreement that meets the requirements of article 28 of the UK GDPR and the EU GDPR, including confidentiality, security measures, subprocessing controls, audit rights and deletion on termination.

2. Categories of processors and partners

Payment processing: Stripe, for accepting tips and related fraud prevention.
Identity verification: specialist providers performing document, liveness and sanctions checks.
Payouts: licensed payout partners delivering funds to Recipients.
Infrastructure: cloud hosting, storage and content delivery for the platform.
Communications: transactional email delivery.

3. Transfers

Where a processor stores or accesses data outside the UK or the EEA, the transfer is covered by an adequacy decision, the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, plus supplementary measures where appropriate.

4. Changes to processors

We review processors before engagement and periodically thereafter. Material changes to the categories above will be reflected on this page before they take effect.

5. Questions

Data processing questions, including requests for our current detailed vendor list, can be sent to hello@kudvi.com.