1. Parties and purpose

This Data Processing Addendum ("DPA") forms part of the Terms of Service between the Shopify merchant ("Controller") and Kent Traders Ltd, trading as AIMarketOps Connect ("Processor"). It applies only to personal data processed to provide the AIMarketOps Connect read-only Shopify merchant dashboard.

2. Processing details

| Item | Description | |---|---| | Subject matter | Display of Shopify products and limited order status/totals in a read-only dashboard | | Duration | While the app is installed, plus limited retention required for compliance/security records | | Data subjects | Shopify merchant; Shopify customers only if present in mandatory privacy webhook requests | | App data retained | Product fields; order identifier, line items, totals, dates and statuses; non-identifying embedded merchant principal | | Data intentionally excluded | Customer names, emails, phone numbers and billing/shipping addresses from public dashboard imports |

3. Processor obligations

We process personal data only to provide the service, meet Shopify mandatory webhook obligations, secure the service, or comply with applicable law. We use access controls, encryption for Shopify credentials, tenant isolation, and access/audit logging appropriate to the processing.

4. Sub-processors and transfers

Approved infrastructure sub-processors are listed in the Privacy Policy. We remain responsible for their processing and apply appropriate safeguards for international transfers.

5. Deletion and assistance

On Shopify customers/redact or shop/redact delivery, we delete or anonymise applicable personal/raw Shopify data and revoke stored Shopify credentials. We assist the merchant with data subject requests submitted through Shopify's mandatory privacy webhooks or by email.

6. Contact

For DPA questions or a signed copy, contact contact@kenttraders.co.uk.