AdornTrade Dropship Data Processing Terms

These terms apply between you, the merchant who installs the AdornTrade Dropship app for Shopify ("the app"), and Guangzhou Jewena Jewelry Co., Ltd., Room B127, 6/F, No. 55 Huangcun Road, Guangzhou, Guangdong, China ("we"). By installing or using the app you agree to them. They describe how we process personal data that the app receives from your store. Our app privacy policy lists that data in detail.

1. Roles

For personal data of your customers that the app receives from your store, you are the controller and we process it on your behalf as your supplier, only to fulfil the orders you route to us.

2. What we process and why

• Store information (store domain, name, contact email, currency) — to operate the app and send you payment links.
• For orders routed to us: the shipping recipient's name, address and phone number, and the items ordered — to create, pack and ship the supplier order and report tracking back to your store.

We do not use this data for marketing, we do not sell it, and we do not combine it with other data to profile your customers.

3. Who else receives it

Shipping details are shared with the carrier that delivers the parcel and, where required, with customs authorities for that shipment. Our servers are operated by our hosting provider. We do not share the data with anyone else except where the law requires it.

4. Security measures

• All connections between Shopify, the app and our website use HTTPS.
• Database backups are encrypted (AES-256) before they are stored.
• Access to order data is limited to the staff who process and ship orders, through individual staff accounts with strong password requirements; access to our back office is logged.
• Test and development data are kept separate from production data.

5. Retention and deletion

When you uninstall the app, its access to your store ends immediately and, when Shopify asks us to, we delete all app records about your store. Shipping records of supplier orders are kept for as long as accounting, tax and customs rules require. Requests from your customers to access or delete their data, received through Shopify, are answered within 30 days.

6. Security incidents

If we become aware of a security incident affecting personal data received through the app, we will notify you without undue delay and in any case within 72 hours, with what we know about the incident, the data affected and the measures taken, and we will cooperate with you on any notifications you have to make.

7. Contact

Questions about these terms: sales@adorntrade.com.