Torgly data processing agreement
This agreement applies between you as the merchant (“controller”) and Ewelina Och Mattias Gyllensvaan AB (org.nr 556683-7042, momsnr SE556683704201), Prästgränd 6D, 563 31 Gränna, Sverige (“we”, “processor”) when you install and use Torgly. It supplements the privacy policy and follows Article 28 GDPR. By installing the app you accept this agreement.
1. Nature and purpose of processing
We process your customers’ personal data solely to create marketplace orders in your Shopify store and to notify the marketplace when an order has shipped. We process data only on your documented instructions, which consist of the app’s features and the settings you choose in the app.
2. Categories of data and data subjects
- Data subjects: buyers on the marketplaces you connect.
- Data: name, shipping address, phone number and – if the marketplace shares it – email.
- No special categories of personal data are processed.
3. Storage and deletion
Customer data is passed directly into the Shopify order and is not stored in our database. Order lines without customer data are kept for 12 months. On uninstall, marketplace credentials are deleted immediately and other store data within 48 hours.
4. Our obligations
- Only authorised staff bound by confidentiality have access, using two-factor authentication.
- We apply appropriate technical and organisational measures: encryption in transit (TLS) and at rest, encrypted backups, access logging and separate test and production environments. See security and incident response.
- We notify you without undue delay, and within 72 hours, of any personal data breach affecting your data.
- We assist you in responding to data subject requests. Shopify GDPR requests are answered automatically.
- We provide the information needed to demonstrate compliance with this agreement.
5. Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Render Services, Inc. | Servers and database | Frankfurt, EU |
| Resend | Email notifications to you as the merchant (no customer data) | EU region |
We notify you in the app before engaging new sub-processors. You may object by uninstalling the app.
6. International transfers
We do not store customer data. Hosting is within the EU/EEA. Any transfer outside the EU/EEA only takes place with a valid transfer mechanism under GDPR.
7. Term
This agreement applies while the app is installed and ends once data has been deleted after uninstall.
Questions: info@torgly.com.