Data processing agreement

Borderdesk · last updated 24 October 2026

This agreement applies between a merchant who installs Borderdesk (the controller) and Yuri Fernandes de Oliveira, who runs Borderdesk (the processor). It covers the personal data of the merchant's customers that the app processes, and forms part of the terms under which the merchant uses the app. The privacy policy describes the same processing in plain words.

1. Subject and duration

The processor prints customs documents for the merchant's orders. Processing lasts while the app is installed, and ends with the deletion described in section 8.

2. Data and people concerned

• People: the merchant's customers who receive international orders, and buyers whose VAT number is printed.
• Data: name, company, shipping address, phone, email, the buyer's VAT number, and the order's products and amounts.
• No special categories of personal data are processed.

3. Instructions

The processor processes the data only to provide the app's features to the merchant: listing orders that need customs documents, checking them, and printing and reprinting the documents. Using the app is the merchant's instruction. The processor doesn't sell the data or use it for marketing, advertising, profiling or training AI models. If an instruction would break data protection law, the processor tells the merchant.

4. Confidentiality

Only the operator has access to the data, for support and maintenance, and is bound to keep it confidential.

5. Security

• Data travels over HTTPS only.
• The database runs on an encrypted disk, isn't reachable from the internet, and is backed up daily to encrypted snapshots kept for 7 days.
• Server access goes through the hosting provider's access controls, with multi-factor authentication; there is no password or SSH login.
• Secrets are stored encrypted, apart from the code. Requests from Shopify are verified by signature.
• Each shop sees only its own data. Error reports contain no request data.

6. Subprocessors

The merchant authorises these subprocessors. The processor tells merchants at least 30 days before adding or replacing one that receives customer data, and the merchant may object by uninstalling the app.

• Amazon Web Services EMEA SARL: hosting, the database and backups, in Ireland.
• Functional Software, Inc. (Sentry): error reports, without customer data.

HS code suggestions are made by OpenRouter and Anthropic, and tariff and exchange rate data comes from the UK Trade Tariff service and the European Central Bank. None of them receive customer data.

7. Customers' rights

The processor helps the merchant answer requests from customers. When Shopify passes on a request for a customer's data, the processor sends the merchant what the app holds within 30 days. When Shopify asks for a customer's data to be deleted, it is removed from every stored document.

8. Retention and deletion

• Printed documents are kept while the app is installed, so they can be reprinted. After 7 years, the customer's personal data is removed from them.
• 48 hours after the app is uninstalled, Shopify asks the processor to delete the shop's data, and all of it is deleted. Backups roll over within 7 days.

9. Personal data breaches

The processor tells the merchant without undue delay, and at the latest within 72 hours, after becoming aware of a breach affecting their customers' data, with what is known about it and what is being done. It also tells Shopify where Shopify's terms require it.

10. Transfers outside the EEA

Customer data is stored in the EU. Error reports, which hold no customer data, may be processed in the US.

11. Audits

On request, the processor gives the merchant the information needed to show that it meets this agreement, including answers to reasonable security questionnaires.

Contact

Questions about this agreement: support@borderdesk.eu.