Data Processing Addendum
This Addendum sets out how ECOMSE processes personal data on your behalf when you use the platform to run your brand.
1. Scope and roles
This Data Processing Addendum forms part of the Terms of Service between you, the Customer, and ECOMSE. It applies where ECOMSE processes personal data on your behalf.
For personal data relating to your shoppers, subscribers and customers, you are the controller and ECOMSE is the processor. For your own account data, ECOMSE is an independent controller under our Privacy Policy.
Terms such as personal data, controller, processor, data subject and processing have the meanings given in applicable data protection law.
2. Processing instructions
ECOMSE processes personal data only on your documented instructions. These include instructions given through your use of the platform and the settings you configure.
If ECOMSE believes an instruction violates applicable law, we will inform you unless prohibited from doing so.
The subject matter, duration, nature and purpose of processing are described in the platform documentation and your account configuration. So are the types of data and data subjects.
3. ECOMSE obligations
- Ensure persons authorized to process personal data are bound by confidentiality
- Implement appropriate technical and organizational security measures
- Assist you in responding to data subject requests
- Assist you with security, breach notification and impact assessments as reasonably required
- Notify you without undue delay after becoming aware of a personal data breach affecting your data
- Delete or return personal data at the end of the service, subject to legal retention requirements
- Make available information necessary to demonstrate compliance and allow reasonable audits
4. Sub-processors and international transfers
You authorize ECOMSE to engage sub-processors to deliver the service, such as hosting, payment, email delivery and support providers.
ECOMSE imposes data protection obligations on sub-processors no less protective than those in this Addendum and remains responsible for their performance.
A current list of sub-processors is available on request from legal@ecomse.app. We will give notice of material changes and you may object on reasonable grounds.
Personal data may be transferred outside the region in which it was collected. Where this happens, ECOMSE ensures appropriate safeguards such as adequacy decisions or standard contractual clauses.
Where standard contractual clauses are required, they are incorporated into this Addendum by reference and take precedence in the event of conflict.
5. Security, breaches, term and contact
ECOMSE maintains security measures including encryption in transit and at rest, access controls, logging, monitoring, regular testing and secure development practices.
In the event of a personal data breach affecting your data, ECOMSE will notify you without undue delay. We will provide information reasonably available to help you meet your obligations.
This Addendum remains in effect for as long as ECOMSE processes personal data on your behalf. Liability is subject to the limitations in the Terms of Service.
Questions about this Addendum can be sent to legal@ecomse.app. This Addendum is effective as of November 8, 2026.
Compliance handled with care
Start free and run your brand on a platform built for responsible data handling.