Terms of Service & Data Processing Agreement
These Terms govern use of the application. The Data Processing Agreement in Schedule A applies where Excel Web Works Ltd processes merchant customer personal data on the merchant's behalf. Merchants should review these terms before using the service.
1. Agreement and scope
These Terms of Service (the “Terms”) govern the use of Shopador Store Doctor and Store Doctor Pro (together, the “Service”), provided by Excel Web Works Ltd (“we”, “us” or “Provider”). The business installing or using the Service is the “Merchant”. By installing or using the Service, the Merchant agrees to these Terms to the extent permitted by applicable law. A person accepting these Terms for a business represents that they are authorised to do so.
2. Features
Store Doctor supports Shopify product and theme template management. Where available under an eligible plan, Store Doctor Pro supports merchant-supplied order and courier tracking imports, order eligibility checks, batch review and approval, and Shopify fulfilment creation. The Merchant may choose whether Shopify should send dispatch notifications for a fulfilment. Available features may vary by subscription, Shopify permissions and app release.
3. Merchant responsibilities
The Merchant is responsible for the accuracy and lawful use of data submitted to the Service, for reviewing order numbers, tracking details and fulfilment quantities before approving an operation, for managing staff access, and for meeting its obligations to customers under applicable consumer protection and data protection law. Safeguards in the Service reduce risk but do not replace Merchant review.
4. Plans, billing and cancellation
Paid plans, applicable trial periods, charges and billing intervals are presented through Shopify's subscription process. The Merchant authorises charges by accepting the relevant subscription in Shopify. Subscription management and cancellation are handled through Shopify. Uninstalling the app does not necessarily resolve outstanding charges already incurred under Shopify's billing arrangements.
5. Personal data and privacy
Our Privacy Policy describes the personal data we process and why. When we process a Merchant's customer personal data on the Merchant's behalf, Schedule A below forms the Data Processing Agreement (“DPA”) between the Merchant as controller and Excel Web Works Ltd as processor, insofar as those roles apply. We may act as an independent controller for our own business administration, security and support data.
6. Confidentiality and security
We will use appropriate technical and organisational measures, taking account of the nature and risks of processing, to protect personal data from unauthorised access, alteration, loss and disclosure. These include app authentication, access controls and encrypted transport where applicable. Authorised persons processing customer personal data will be subject to confidentiality obligations.
7. Service changes and availability
We may maintain, improve or modify the Service. We do not promise uninterrupted availability or that every Shopify order is eligible for automated fulfilment. We will provide notice of material changes where required by law.
8. Acceptable use
The Merchant must not use the Service unlawfully, attempt unauthorised access, circumvent access controls, or use it to process data without an appropriate legal basis. We may restrict access when reasonably necessary to protect the Service, Merchants or customers, subject to applicable law.
9. Liability
To the extent permitted by law, we are not responsible for losses caused by inaccurate information supplied or approved by the Merchant, unauthorised Merchant actions, or failures outside our reasonable control. Nothing in these Terms limits or excludes liability where such limitation or exclusion is prohibited by law, including applicable data protection obligations.
10. Termination
The Merchant may stop using the Service by uninstalling the app and managing any active Shopify subscription. On termination, personal data will be handled in accordance with the Privacy Policy and Schedule A. Provisions intended to survive termination, including confidentiality and applicable data protection duties, remain effective.
11. Governing law and contact
These Terms are governed by Irish law, without prejudice to mandatory protections applicable under other laws.
Excel Web Works Ltd
Ireland
philiplarnold588@gmail.com
Schedule A — Data Processing Agreement
A1. Roles and instructions
For Merchant customer personal data processed on the Merchant's behalf, the Merchant is controller and Excel Web Works Ltd is processor, unless the applicable law determines otherwise. The Provider will process that data only on documented Merchant instructions, including the Merchant's authorised use of the Service and these Terms, or as required by law. If legally permitted, we will notify the Merchant before legally compelled processing and will inform the Merchant if we believe an instruction infringes applicable data protection law.
A2. Processing details
| Subject matter | Operation of Store Doctor and Store Doctor Pro |
|---|---|
| Duration | While the Service is used, plus necessary deletion, backup and legally required retention periods |
| Nature of processing | Accessing, validating, using, temporarily storing, updating and deleting data through Shopify APIs and app infrastructure |
| Purpose | Product template management; merchant-authorised order fulfilment, tracking and operational security |
| Data subjects | Customers whose Shopify orders are processed by the Merchant |
| Personal data | Order identifiers and numbers, fulfilment status, fulfilment order and line item identifiers, courier tracking information, and related temporary approval/lock records. Order-linked identifiers can be personal data even without customer contact details. |
| Controller | Merchant |
| Processor | Excel Web Works Ltd |
A3. Security and confidentiality
The Provider will implement appropriate measures under Article 32 GDPR, considering the state of the art, implementation costs and risks. Persons authorised to process customer personal data will be subject to confidentiality obligations.
A4. Subprocessors
The Merchant authorises the use of subprocessors necessary to provide the Service, currently including Render for application hosting and Neon for managed PostgreSQL database infrastructure. Shopify is the platform through which the Service operates and may act in roles determined by its own agreements. The Provider will impose appropriate data protection obligations on subprocessors where required by law, remain responsible for their performance of applicable processor duties, and provide notice of intended material subprocessor changes with a reasonable opportunity to object where required.
A5. International transfers
Restricted international transfers of personal data will take place only where an applicable lawful transfer mechanism is in place, such as an adequacy decision or relevant standard contractual clauses, together with supplementary measures where required.
A6. Assistance with rights and compliance
Taking account of the nature of processing and information available, the Provider will reasonably assist the Merchant with data subject requests and with applicable security, breach notification, data protection impact assessment and prior consultation duties. The Merchant remains responsible for determining and responding to requests as controller.
A7. Personal data breaches
The Provider will notify the Merchant without undue delay after becoming aware of a personal data breach affecting Merchant customer personal data processed under this DPA, and will provide available information and reasonable assistance relevant to the Merchant's legal obligations.
A8. Retention, deletion and return
The Provider will not retain Merchant customer personal data longer than needed for the Service or lawful purposes. Fulfilment approvals have limited validity and processing locks have expiry controls; expiration alone does not guarantee immediate physical deletion. Shop-specific records are intended to be removed following verified app uninstall and shop-redaction processing. At the end of processing, the Provider will, at the Merchant's choice where required by law, delete or return personal data and delete existing copies unless legally required to retain them, subject to documented technical and backup procedures.
A9. Demonstrating compliance
The Provider will make available information reasonably necessary to demonstrate compliance with applicable processor obligations and permit and contribute to legally required audits or inspections, subject to appropriate confidentiality and security arrangements.
A10. Priority
If these Terms conflict with mandatory applicable data protection law, that law prevails. For processing of Merchant customer personal data, this Schedule governs over conflicting general provisions of these Terms.
Updates
We may update these Terms to reflect changes in the Service or legal requirements. Material changes will be communicated where required. The effective date at the top identifies this version.