Data Processing Addendum (DPA)

Effective date: 07 Oct 2025

This page summarizes our Data Processing Addendum, which governs our processing of personal data on behalf of merchants when required by law (e.g., GDPR/UK GDPR). By installing and using Convomesh, and where applicable, the DPA forms part of your agreement with us.

Highlights

• Roles: Merchant as controller; Convomesh (Melbourne Digital Group Pty Ltd) as processor.
• Subject matter: processing Shopify commerce and web events to provide the Service.
• Duration: for the term of your subscription and limited retention thereafter per policy.
• Security: administrative, technical, and physical measures, including encryption in transit/at rest and access controls.
• Sub‑processors: listed at /legal/subprocessors.
• Data subject requests: supported via Shopify GDPR topics and our operator flows.
• International transfers: appropriate safeguards where required by law.

To obtain a signed DPA (including SCCs where applicable), contact msango@convomesh.com.

Download a copy: convomesh-dpa.txt