Data processing agreement

Effective 7 October 2026. This agreement forms part of the service terms. The merchant is controller of customer enquiry data; Studio8022 acts as processor when handling it on the merchant’s behalf, and independently for its own legal, billing and security administration.

Scope and instructions

Processing includes collection, storage, retrieval, updates, transmission, export and deletion of enquiry details, merchant replies and notes, product context and linked draft and order outcomes. Data subjects include customers, merchant staff and support contacts. Your configuration, use of the service and documented support instructions define permitted processing. Do not request special-category data, identity documents, passwords or payment-card details through the service.

Our obligations

We restrict access to authorised personnel subject to confidentiality obligations, maintain appropriate access, transport and application security, assist with verified rights requests and relevant regulatory obligations, and notify you without undue delay of a confirmed personal-data breach affecting your data. Contact support for information reasonably needed to demonstrate compliance or arrange a proportionate audit.

Providers and transfers

You authorise the providers described in the Studio8022 provider information for the relevant platform, hosting and email services. We apply relevant contractual protections for subprocessors and international transfers, communicate material processor changes, and provide a reasonable opportunity to raise a data-protection objection.

End of service

Uninstalling disables new processing and cancels queued app email. Records are removed according to the privacy notice and Shopify’s subsequent deletion notifications, except where law requires retention. You can export enquiries and request assistance before uninstalling. Shopify drafts, orders and merchant mailbox copies remain under your control in those services.

Contact support@studio8022.com.