logo

Data Processing Agreement (DPA)

1. Introduction

This Data Processing Agreement ("DPA") forms part of the agreement between 16847323 CANADA LIMITED operating as Eyemesto Shipping ("Eyemesto Shipping", "Data Processor") and the User or business entity ("Data Controller") using the Eyemesto Shipping platform. This DPA addresses the processing of personal data in accordance with applicable privacy legislation, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR), and other applicable privacy laws.

2. Definitions

  • Personal Data means any information relating to an identified or identifiable natural person, including but not limited to names, addresses, email addresses, and payment information.
  • Processing means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
  • Data Controller means the User who determines the purposes and means of processing Personal Data.
  • Data Processor means Eyemesto Shipping, which processes Personal Data on behalf of the Data Controller.

3. Scope and Purpose of Processing

Eyemesto Shipping processes Personal Data solely for the purpose of providing shipping, logistics, and related platform services as described in the Privacy Policy, and only to the extent necessary to fulfill these services.

4. Data Processing Obligations

Eyemesto Shipping agrees to:

  • Process Personal Data only on documented instructions from the Data Controller.
  • Ensure that persons authorized to process Personal Data are bound by confidentiality obligations.
  • Implement appropriate technical and organizational security measures to protect Personal Data.
  • Assist the Data Controller in meeting obligations related to data subject rights, where reasonably possible.
  • Delete or return Personal Data upon termination of services, as requested.
  • Make available all information necessary to demonstrate compliance with this DPA.

5. Sub-Processors

Eyemesto Shipping may engage sub-processors (for example, cloud hosting providers, payment processors, and carrier APIs) to assist in delivering services. Sub-processors are contractually bound to data protection obligations no less stringent than those in this DPA. A list of current sub-processors is available upon request.

6. Data Subject Rights

Users (and individuals whose data they process) have the right to access, rectify, erase, restrict, and port their Personal Data. Requests may be submitted to legal@eyemestoshipping.com. Eyemesto Shipping will respond within the timeframes required by applicable law.

7. Data Retention

Personal Data is retained only as long as necessary to provide services and comply with legal obligations. Specific retention periods are outlined in the Eyemesto Shipping Privacy Policy.

8. International Transfers

Where Personal Data is transferred outside Canada or the EEA, Eyemesto Shipping will ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms.

9. Contact

Data protection inquiries can be sent to legal@eyemestoshipping.com.