SETROASFLOW: REGIONAL PRIVACY ADDENDA

Version: Draft, 26 August 2026

EU / EEA

SetRoasFlow is designed to support GDPR-regulated processing. EU/EEA traffic is configured for affirmative consent handling where consent is the applicable legal basis. A Merchant remains responsible for determining the lawful basis for its own processing.

UK

The Service should be configured to account for the UK GDPR and applicable UK ePrivacy rules. This point is being finalized with counsel; write to [email protected] for the current position.

SWITZERLAND

The Service should be configured to account for the Swiss Federal Act on Data Protection and applicable cookie/communications requirements. This point is being finalized with counsel; write to [email protected] for the current position.

UNITED STATES

SetRoasFlow supports an opt-out model and Global Privacy Control handling where applicable. US state privacy requirements vary. This point is being finalized with counsel; write to [email protected] for the current position.

No addendum should be interpreted as a legal guarantee that a Merchant's implementation is compliant with every jurisdiction-specific rule.