Legal

Data Processing Agreement

Last updated 8 October 2026.

Legal review required. This document is a draft structure adapted for Shipeezi and has not been reviewed by counsel. Defined terms, liability caps, governing law and the sub-processor list must be confirmed before launch. Do not rely on it until then.

1. Roles

For customer data processed in the platform, the customer is the controller and Dumont Pty Ltd is the processor. For data collected through this website, Dumont is the controller, as described in the Privacy Policy.

2. Scope of processing

We process customer data only to provide, secure and support the service, and on the customer's documented instructions. The categories of data and data subjects are those the customer chooses to put into the platform.

3. Security measures

Access control, tenant isolation by grant, field-level encryption for sensitive fields, an audit trail of changes, and secure development and deployment practices.

4. Sub-processors

The current sub-processor list is maintained here and updated before a new sub-processor is engaged, giving the customer an opportunity to object.

Sub-processorPurposeLocation
To be confirmedCloud hostingTo be confirmed
To be confirmedIdentity providerTo be confirmed
To be confirmedEmail deliveryTo be confirmed
To be confirmedAnalyticsTo be confirmed

5. International transfers

Where personal data is transferred internationally, we rely on appropriate safeguards. The transfer mechanism must be confirmed by counsel.

6. Assistance and rights

We help the customer respond to data-subject requests and to security incidents, and notify the customer without undue delay after becoming aware of a personal-data breach.

7. Deletion and return

On termination we make customer data available for export for a defined window, then delete it under our retention policy, unless law requires retention.

8. Audit

We provide the information reasonably needed to demonstrate compliance with this agreement, subject to confidentiality.