Data processing agreement
Version 2026-09-29. This data processing agreement is between ESKI UNION LLC (United States) (“Makeuno”) and the merchant accepting it for their workspace. Contact: [email protected]. It applies to personal data Makeuno processes on the merchant’s behalf to provide the service.
Instructions, roles and scope
The merchant determines the purposes and legal basis for its customer-data processing and acts as controller, or as an authorized processor for its controller. Makeuno acts as processor or subprocessor for that workspace data. Account administration, billing and our own legal obligations are addressed in the privacy notice. Processing consists of authorized collection, storage, organization, display, export and deletion for inventory and operational workflows. Data subjects may include merchant customers, prospective customers, staff and business contacts. Data includes the operational records the merchant supplies and the limited Shopify order fields described in the privacy notice. The service does not require sensitive personal data.
Merchant responsibilities
The merchant confirms it has authority to provide instructions and upload or connect data, supplies required notices and a valid legal basis, communicates applicable consent restrictions and rights requests, and limits access to authorized users. It must not use Makeuno for unlawful processing. Optional order import is a separate choice. Acceptance by an administrator represents that they are authorized to act for the merchant.
Makeuno responsibilities
Makeuno processes workspace personal data only on documented merchant instructions and as required by law. We notify the merchant of a legal requirement unless prohibited, and inform it if an instruction appears to conflict with applicable data protection requirements. We restrict access to authorized persons subject to confidentiality duties, apply access controls and encryption for the hosted service, and do not sell the data or use it for unrelated advertising or profiling.
Subprocessors and transfers
The merchant authorizes the infrastructure subprocessors identified in the privacy notice for their stated service functions. Makeuno requires appropriate contractual data protection obligations from subprocessors and remains responsible for its processing obligations. We give affected merchants advance notice of material subprocessor changes, allowing an opportunity to raise a reasoned data protection objection. If an objection cannot be resolved, the affected processing can be stopped and the merchant can request export or deletion. Transfers requiring safeguards must be covered by a lawful transfer mechanism; this agreement does not itself replace any required standard contractual clauses.
Rights, incidents and cooperation
Makeuno assists the merchant with access, correction, deletion, restriction and applicable consent decisions, and with reasonable information needed for security assessments, impact assessments and compliance verification. We inform the merchant without undue delay after becoming aware of a personal-data breach affecting its workspace and share available information needed for its response. The merchant can request relevant compliance information or agree a proportionate audit that protects other customers’ data and security.
Return and deletion
The merchant can export workspace records and request deletion at [email protected]. The retention and deletion schedule in the privacy notice forms part of this agreement. When processing ends, Makeuno deletes or returns the relevant personal data on instruction, including relevant copies, except data required by law to be retained. Any exception must be limited, access-restricted and assigned an end date. Recovery backups expire under the configured backup window and deletion instructions are reapplied before restored data returns to service. Keeping an operational record does not authorize keeping unnecessary customer identifiers.
Acceptance and duration
This agreement applies when the merchant accepts it through Makeuno’s Shopify connection flow and for as long as Makeuno processes the covered data, including the applicable deletion period. The application records the accepting user, workspace connection, version and timestamp. A materially revised agreement requires renewed acceptance before further Shopify reads.