DwumaPOS · Legal
Data Processing Addendum
How DwumaPOS processes merchant workspace personal data as a processor.
1. Roles
For merchant workspace data, you (the merchant) are typically the controller of your customer and business data. DwumaPOS acts as a processor when we host and process that data to provide the Service. For our own account, billing, and marketing data, DwumaPOS is a controller as described in the Privacy Policy.
2. Scope of processing
We process personal data only to provide POS, storefront, inventory, support, security, and related features you enable — including subprocessors needed to run hosting, email, and payments infrastructure.
3. Instructions
We process merchant personal data on your documented instructions (use of the Service and support requests). We will not sell that data or use it for unrelated advertising.
4. Confidentiality
Personnel authorized to process personal data are bound by confidentiality obligations.
5. Security
We implement appropriate technical and organizational measures (encryption in transit, access controls, logging). Details are summarized in the Privacy Policy; enterprise customers may request a security overview under NDA.
6. Subprocessors
We use infrastructure and product subprocessors (for example cloud hosting, email, and analytics). A current list is available on request from platform support. We remain responsible for subprocessors we engage.
7. International transfers
Where personal data is transferred internationally, we use appropriate safeguards required by applicable law.
8. Assistance
Taking into account the nature of processing, we will assist with data subject requests, security incidents, and reasonable audits as required by applicable data protection law — coordinated via platform support.
9. Breach notice
We will notify you without undue delay after becoming aware of a personal data breach affecting your workspace data, and provide information reasonably available to help you meet your obligations.
10. Return & deletion
On termination, you may export data within the documented window. After that we delete or anonymize personal data in merchant workspaces except where law requires retention.
11. Precedence
If you have a signed enterprise agreement with conflicting DPA terms, that agreement controls. Otherwise this Addendum and the Terms / Privacy Policy apply.
12. Contact
Data protection questions: contact platform support. This Addendum is intended as a practical baseline for merchants; it is not a substitute for jurisdiction-specific counsel.
Also see Terms, Privacy, Cookies, Acceptable Use, DPA, Accessibility, and Site map.