AGAmple Group

Enterprise customer-data governance

Customer Data Processing Atlas

Executive Dashboard and DPDPA Readiness Overview

Last updated Data Pending

Enterprise scope

One evidence-led view of customer-data processing across Ample Group

Configured business-unit journeys across retail, commerce, service, support and enterprise solutions—normalised into shared systems, recipients, risks and governance actions.

Enterprise Risk PostureAssessment in progress

No unsupported compliance score is calculated.

Operating scope

8 business units · 5 business domains

Counts and status are derived from each configured journey.

Retail & Commerce5 business units

Retail & Commerce

LEGO

Documented

Systems: 20
Activities: 97
Risks: 22
Recipients: 13
Review items: 12
Highest risk: Critical

Retail & Commerce

ASICS

Documented

Systems: 10
Activities: 55
Risks: 11
Recipients: 8
Review items: 10
Highest risk: Critical

Retail & Commerce

Under Armour

Documented

Systems: 7
Activities: 61
Risks: 16
Recipients: 7
Review items: 5
Highest risk: Critical

Retail & Commerce

BOSE

Documented

Systems: 15
Activities: 88
Risks: 20
Recipients: 11
Review items: 6
Highest risk: Critical

Retail & Commerce

Imagine

Documented

Systems: 24
Activities: 136
Risks: 14
Recipients: 17
Review items: 16
Highest risk: Critical

Owned Brands1 business unit

Owned Brands

Tekne

Documented

Systems: 8
Activities: 38
Risks: 5
Recipients: 8
Review items: 5
Highest risk: High

Service & Support1 business unit

Service & Support

iCare

Documented

Systems: 11
Activities: 101
Risks: 12
Recipients: 8
Review items: 6
Highest risk: Critical

Enterprise & Commercial1 business unit

Enterprise & Commercial

B2B Solutions

Documented

Systems: 7
Activities: 59
Risks: 6
Recipients: 10
Review items: 8
Highest risk: High

Shared Enterprise Services

Contact Centre

A shared processing hub connected to confirmed retail, service and B2B source journeys without changing the business-unit count.

Shared Enterprise Service

Ample Group Contact Centre

Freshdesk, BIK.ai, email, WhatsApp, local files and recorded-call platforms support enquiry, lead, service and business-team workflows.

Business units served: 5
Systems: 10
Recorded-call platforms: 2
Critical risks: 4

Enterprise metrics

Configured processing footprint

Canonical IDs prevent shared enterprise platforms from being counted once per brand.

DPDPA indicators

Documented exposure and review signals

These are processing and risk counts—not findings of unlawfulness.

Decision view

Risk severity

Actual configured severities across all configured journeys.

Critical42

High64

Medium6

Low1

Review Required1

Accessible risk severity data
Severity	Count
critical	42
high	64
medium	6
low	1
review-required	1

Compliance readiness

Evidence status

No requirement is marked complete without an explicit configured evidence record.

Data InventoryNot Assessed

Processing Purpose RegisterNot Assessed

Processor and External Recipient RegisterNot Assessed

Consent ReviewNot Assessed

Privacy Notice ReviewNot Assessed

Children’s Data ReviewNot Assessed

Government ID ReviewNot Assessed

Customer Rights ProcessNot Assessed

Executive priorities

Recommendations supported by documented risks

Suggested owner categories are functional roles, not named individuals.

Critical37 supporting risks

Standardise privacy notices

Improve processing transparency and customer understanding.

Affected brands: LEGO, ASICS, Under Armour, BOSE, Imagine, iCare, Tekne, Contact Centre
Suggested owner: Privacy and Legal

Critical29 supporting risks

Separate mandatory acceptance from optional marketing consent

Reduce preference ambiguity and improve withdrawal handling.

Affected brands: LEGO, ASICS, Under Armour, BOSE, Imagine, Tekne
Suggested owner: Marketing and Privacy

Critical13 supporting risks

Reduce and govern customer-data processing through WhatsApp

Reduce uncontrolled copies, forwarding and device exposure.

Affected brands: LEGO, Under Armour, BOSE, Imagine, Contact Centre
Suggested owner: Retail Operations and IT

Critical21 supporting risks

Reduce uncontrolled spreadsheet and local-file copies

Reduce duplicate files and improve retention, access and deletion controls.

Affected brands: LEGO, ASICS, Under Armour, BOSE, Imagine, iCare, B2B Solutions, Contact Centre
Suggested owner: IT and Business Operations

Critical88 supporting risks

Define enterprise retention and deletion standards

Reduce over-retention and improve customer-rights execution.

Affected brands: LEGO, ASICS, Under Armour, BOSE, Imagine, iCare, B2B Solutions, Tekne, Contact Centre
Suggested owner: Privacy, Records and IT

Critical73 supporting risks

Strengthen role-based access and activity logging

Reduce unnecessary profile, history and document exposure.

Affected brands: LEGO, ASICS, Under Armour, BOSE, Imagine, iCare, B2B Solutions, Tekne, Contact Centre
Suggested owner: Information Security and System Owners

Critical12 supporting risks

Review call recording and analytics controls

Improve recording transparency, access and retention controls.

Affected brands: LEGO, ASICS, Under Armour, Imagine, iCare, Contact Centre
Suggested owner: Contact Centre and Privacy

Critical14 supporting risks

Secure government identity and education documents

Reduce exposure of high-impact identity documentation.

Affected brands: LEGO, ASICS, Under Armour, BOSE, Imagine
Suggested owner: Information Security and Operations

Quick actions