Received a document, but not the right one. The DPA needs to outline id8retail as a Processor (not Controller) with MotherDuck as a Sub-processor. In plain-speak, the data doesn't belong to id8retail; id8retail is contracted to someone else and processes their data, with MotherDuck engaged by id8retail to act as a sub-processor.