Processor terms
Data Processing Agreement
The data-processing terms that apply when Liva 7 handles personal data on your instructions.
This DPA forms part of the Terms of Service between you as controller and David Cope, operator of Liva 7, as processor for personal data handled on your documented instructions.
Scope and instructions.
Liva 7 processes personal data only to provide, secure and support the services you enable, for the duration of your use plus applicable deletion and legal-retention periods. Your configuration, approved Shopify permissions, Terms and written support instructions form the documented instructions.
Processing may include collecting, organising, retrieving, analysing, generating, storing, exposing through authorised interfaces, restricting, deleting and returning eligible information.
People and information covered.
Data subjects may include you, authorised staff, customers, prospective customers and storefront visitors. Data may include identifiers, contact details where permitted, order and checkout context, product and interaction events, consent state, generated recommendations, approvals, action history, support records and technical identifiers.
Do not instruct Liva 7 to process special-category or criminal-offence information unless a separate lawful and documented arrangement is in place.
Your responsibilities.
You determine the purpose and lawful basis, provide lawful instructions, maintain required notices and consents, configure access and retention appropriately, and respond to data-subject requests. You remain responsible for your use of Shopify and for deciding which Liva 7 capabilities to enable.
Liva 7 responsibilities.
- Process personal data only on documented instructions unless law requires otherwise.
- Ensure authorised people are bound by confidentiality.
- Use proportionate technical and organisational safeguards.
- Assist, taking account of available information and the nature of processing, with rights requests, security obligations and impact assessments.
- Notify you without undue delay after becoming aware of a personal-data breach affecting processor data.
- Delete or return eligible personal data at the end of service, subject to legal retention and protected backup rotation.
- Make information reasonably necessary to demonstrate these obligations available and support proportionate audits.
Subprocessors and transfers.
You give general authorisation for Liva 7 to use subprocessors needed for Shopify platform access, hosting, databases, artificial intelligence, semantic retrieval, monitoring and communications. Liva 7 remains responsible for imposing appropriate data-protection terms on subprocessors.
Material additions will be notified through an appropriate channel with a reasonable opportunity to raise a data-protection objection. Restricted international transfers will use an applicable adequacy decision, UK Addendum, International Data Transfer Agreement or another lawful mechanism where required. Request current provider information from support@liva7.com.
Priority, changes and contact.
If this DPA conflicts with the Terms on processor obligations, this DPA controls. A material change to processor obligations will be dated and notified where required. Data-protection questions should be sent to support@liva7.com.