SETROASFLOW — REGIONAL PRIVACY ADDENDA

Version: Draft — 25 August 2026

EU / EEA

SetRoasFlow is designed to support GDPR-regulated processing. EU/EEA traffic is configured for affirmative consent handling where consent is the applicable legal basis. A Merchant remains responsible for determining the lawful basis for its own processing.

UK

The Service should be configured to account for the UK GDPR and applicable UK ePrivacy rules. [UK COUNSEL REVIEW REQUIRED.]

SWITZERLAND

The Service should be configured to account for the Swiss Federal Act on Data Protection and applicable cookie/communications requirements. [SWISS COUNSEL REVIEW REQUIRED.]

UNITED STATES

SetRoasFlow supports an opt-out model and Global Privacy Control handling where applicable. US state privacy requirements vary. [US PRIVACY COUNSEL REVIEW REQUIRED.]

No addendum should be interpreted as a legal guarantee that a Merchant's implementation is compliant with every jurisdiction-specific rule.