Legal
Data Processing Addendum
The data-protection terms that apply when Liin processes personal data on a customer’s behalf.
Scope and incorporation
This Data Processing Addendum (“DPA”) forms part of the Terms of Service, order form, or other agreement between LIIN TECH LLC (“Liin”) and the customer (“Customer”) where Liin processes personal data on Customer’s behalf through the Service.
If this DPA conflicts with the main agreement on the processing of Customer Personal Data, this DPA controls. Capitalized terms not defined here have the meanings given in the main agreement.
Roles and instructions
Customer determines the purposes and means of processing Customer Personal Data and acts as controller or business. Liin acts as processor or service provider to the extent it processes that data on Customer’s documented instructions.
The agreement, Customer’s configurations, connected-platform permissions, support requests, and lawful use of the Service constitute documented instructions. Liin will process Customer Personal Data only to provide, secure, support, and improve the contracted Service, or as required by law.
Processing details
Subject matter and duration
Connection, display, storage, transmission, synchronization, support, and security of Customer Personal Data for the subscription term and the deletion period described below.
Nature and purpose
Operating ecommerce and marketplace connections, retrieving and presenting authorized records, synchronizing configured fields, supporting order and fulfillment workflows, diagnosing issues, and protecting the Service.
Data subjects
Customer personnel, account administrators, store users, shoppers, recipients, marketplace participants, support contacts, and other individuals whose data is present in a connected system.
Data types
Names, work contact details, account identifiers, connection metadata, product and offer data linked to individuals, order and transaction details, addresses, delivery details, messages, attachments, return and refund information, support content, and technical logs.
Customer responsibilities
- Ensure instructions and use of the Service comply with applicable law and connected-platform rules.
- Provide required notices and obtain required permissions or consents.
- Use appropriate scopes, roles, security settings, and data-minimization controls.
- Respond as controller to individuals and authorities, with Liin’s reasonable assistance where required.
- Avoid submitting data that is unnecessary for the configured connection.
Confidentiality and personnel
Liin will limit access to Customer Personal Data to personnel and contractors who need access to perform the Service and who are subject to confidentiality obligations. Liin remains responsible for their compliance with this DPA within the scope of their work for Liin.
Security measures
Liin will maintain reasonable technical and organizational measures appropriate to the Service and processing risk. Measures may include:
Customer acknowledges that security measures evolve and that Liin may update them without materially reducing the overall protection of Customer Personal Data.
- Access controls, authentication, role separation, and least-privilege practices.
- Encryption in transit and encrypted storage for supported connection credentials.
- Tenant separation and controls intended to prevent cross-customer access.
- Logging, monitoring, vulnerability management, backups, and incident response procedures appropriate to the Service.
- Processes for deleting or de-identifying Customer Personal Data after termination.
Service providers and subprocessors
Customer gives Liin general authorization to engage subprocessors to support hosting, storage, authentication, communications, analytics, monitoring, security, and customer support. Liin will impose data-protection obligations appropriate to the services they perform.
A current subprocessor list will be made available to Customer on reasonable written request to legal@liinconnect.com. Liin may add or replace subprocessors and will provide notice of a material change where required by applicable law or the Customer’s written order form. Customer’s sole remedy for a reasonable, unresolved objection is to discontinue the affected Service.
Requests and assistance
Taking into account the nature of processing and information available to Liin, Liin will provide reasonable assistance with verified data-subject requests, security obligations, impact assessments, and regulator enquiries where required by applicable law.
Customer is responsible for responding to requests. If Liin receives a request relating to Customer Personal Data, Liin may direct the person to Customer unless law requires Liin to respond directly. Additional assistance outside standard Service functionality may be charged at Liin’s then-current professional-services rates.
Security incidents
Liin will notify Customer without undue delay after confirming unauthorized access to, acquisition of, or disclosure of Customer Personal Data in Liin’s control that requires notice under applicable law. Notice will include information reasonably available to Liin and may be provided in stages.
Notice is not an admission of fault or liability. Customer is responsible for determining its notification obligations and communicating with affected individuals, connected platforms, regulators, and other parties.
Return and deletion
During the term, Customer may retrieve data through available Service and connected-platform functions. After termination, Liin will delete or de-identify Customer Personal Data within 90 days unless law requires retention. Limited backup, security, payment, fraud-prevention, dispute, or legal records may remain protected and isolated until deletion through the applicable lifecycle.
Processing locations and transfers
Customer authorizes processing in the United States and other locations where Liin, connected platforms, and authorized subprocessors operate. Each party is responsible for any transfer mechanism or additional term that applicable law requires for its role.
Information and audits
On reasonable written request, Liin will provide information reasonably necessary to demonstrate compliance with this DPA, subject to confidentiality and security restrictions. Existing independent reports, summaries, questionnaires, and documentation will be used before an on-site audit.
If an audit is legally required and those materials are insufficient, the parties will agree on scope, timing, safeguards, and costs. Audits may occur no more than once in any 12-month period unless a confirmed incident or regulator requires otherwise, must not expose other customers’ information, and will be conducted at Customer’s expense.
Liability and order of precedence
The disclaimers, exclusions, two-month aggregate liability cap, dispute terms, and other limitations in the Terms of Service or applicable written agreement apply to this DPA to the maximum extent permitted by law.
This DPA does not give any third party a contractual right. If a signed order form expressly varies this DPA, the signed variation controls only for that order form.
Contact
DPA and subprocessor questions may be sent to legal@liinconnect.com. LIIN TECH LLC, c/o Harvard Business Services, Inc., 16192 Coastal Hwy, Lewes, Delaware 19958, United States.