Data Processing Agreement

You are the controller of the personal data of your customers and staff that you collect or manage through Ordpin; Ordpin is your processor. This agreement covers that processing. What Ordpin does with data as a controller in its own right (customer accounts, device records, statistics and fraud prevention) is explained in the privacy policy.

Purpose: running your online store, orders, kitchen and till screens, delivery and messages to your customers, as the service works and as you set it up.

Data: names, phone numbers, addresses and map points, order contents, notes and ratings, staff accounts, and the device ids and IP addresses linked to orders. People: your customers, your staff and the people orders are delivered to.

Duration: while your account is open, then as described under deletion.

We process the data only on your documented instructions: these terms, your settings and what you do in the dashboard. If we think an instruction breaks data-protection law, we tell you. We process it otherwise only when the law requires us to, and then we inform you unless that law forbids it.

Everyone at Ordpin who can access the data is bound to confidentiality and accesses it only as far as their work requires.

We take appropriate technical and organisational measures (GDPR Article 32), including encryption in transit (TLS) and at rest (encrypted disks, file storage and backups), access only through individual accounts with the least privileges needed, two independent kinds of backup, monitoring and logs, and regular updates.

You authorise us to use these sub-processors, under written terms that protect the data as this agreement does: Amazon Web Services (hosting, database, file storage and email, in Frankfurt, European Union); Cloudflare (the DNS of Ordpin and of the domains you book; it does not access store data).

We announce any new sub-processor on this page 30 days before it starts. If you object for a valid data-protection reason and we cannot resolve it, you may close your account.

As far as the service allows, we help you answer requests from the people the data is about (access, correction, deletion, portability), and with security, breach notifications and data protection impact assessments. You can handle many requests yourself in the dashboard.

We notify you without undue delay after becoming aware of a breach affecting your data, with what we know, its likely consequences and the measures taken, so that you can meet your own deadlines (72 hours under the GDPR).

The data is stored and processed in the European Union (Amazon Web Services, Frankfurt). Where people outside the European Union, the United Kingdom or Switzerland can access it — including the Ordpin team in Iraq — the transfer is covered by the European Commission's Standard Contractual Clauses (Module Two, controller to processor), with the UK addendum and the Swiss amendments where they apply, which are incorporated into this agreement by reference.

When your account is closed, we delete the personal data we process for you within 90 days, or return it to you if you ask before then, except what the law requires us to keep (for example financial records), which we keep only for that purpose.

We make available the information needed to show that we meet these obligations. You may audit compliance once a year, with 30 days' notice, during working hours and at your own cost, preferably through documents and reports; an audit must not reveal other clients' data.

On data protection, this agreement prevails over the rest of the terms. The terms' rules on liability, duration and dispute resolution apply to it as far as data-protection law allows.

For questions about this agreement, or to give us instructions, write to the Ordpin team through the support form.