Merchant data-processing addendum

Roles and instructions

The merchant determines why its customer and order data is processed. Deliverse processes that data only on the merchant’s documented instruction to review orders, create and operate shipments, synchronize tracking, provide shipment support, prevent abuse and meet applicable legal duties.

Processing details

People

Purchasers, shipment receivers, prospective customers and merchant contacts.

Data

Order identifiers, items and amounts; receiver name, phone and shipping address; shipment, tracking, delivery-attempt and support records.

Purpose

Courier fulfilment and merchant-requested shipment support.

Duration

The connection term plus the periods in the Deliverse privacy notice.

Advertising, unrelated profiling and sale of personal data are outside the merchant’s permitted instruction.

Merchant responsibilities

The merchant confirms it has authority to provide the data, gives required customer notices, supplies accurate instructions and uses Deliverse only for lawful shipments.

Deliverse commitments

Deliverse will apply appropriate technical and organizational safeguards, limit authorized staff, keep protected-data access logs, assist with verified data-subject requests, notify the merchant of a confirmed breach when required, and delete or return personal data when processing ends except for a documented legal duty.

Service providers and transfers

Any service provider used by Deliverse may process data only for the same limited purposes and under equivalent confidentiality, security and deletion obligations. Deliverse remains responsible for its providers’ processing under this addendum.

Ending processing

The merchant can disconnect its commerce integration and submit a privacy request through authenticated Deliverse Support. Connecting or continuing to use a commerce integration after this addendum is presented records the merchant’s instruction to process the listed data.