1. Scope and roles
This Data Processing Addendum (“DPA”) forms part of the agreement between Logistiq and the customer (“Customer”) for the Services. It applies where Logistiq processes personal data on behalf of Customer. Customer is the controller and Logistiq is the processor of such personal data (“Customer Personal Data”).
2. Processing instructions
Logistiq will process Customer Personal Data only on documented instructions from Customer, including as set out in the agreement and as needed to provide the Services, unless required otherwise by law. Logistiq will inform Customer if it believes an instruction violates applicable data protection law.
3. Details of processing
The processing covered by this DPA includes:
- Subject matter: provision of the Logistiq Services.
- Duration: the term of the agreement plus any post-termination retention period.
- Nature and purpose: rate comparison, shipment creation, tracking, notifications, analytics, Copilot assistance and revenue attribution.
- Data subjects: Customer’s users, customers, recipients and storefront visitors.
- Categories of data: names, contact details, addresses, order details, usage data and transaction references.
4. Confidentiality
Logistiq ensures that personnel authorized to process Customer Personal Data are bound by confidentiality obligations.
5. Security measures
Logistiq implements appropriate technical and organizational measures to protect Customer Personal Data, including encryption in transit and at rest, access controls based on least privilege, logging and monitoring, secure development practices, and business continuity planning.
6. Subprocessors
Customer authorizes Logistiq to engage subprocessors to support the Services. Logistiq imposes data protection obligations on subprocessors that are no less protective than this DPA and remains responsible for their performance. A current list of subprocessors is available on request, and Logistiq will provide notice of new subprocessors, giving Customer an opportunity to object on reasonable grounds.
7. Data subject requests
Taking into account the nature of processing, Logistiq will assist Customer by appropriate measures in responding to requests from data subjects exercising their rights under applicable law.
8. Personal data breaches
Logistiq will notify Customer without undue delay after becoming aware of a personal data breach affecting Customer Personal Data, and will provide information reasonably needed for Customer to meet its obligations.
9. International transfers
Where Customer Personal Data is transferred across borders, Logistiq will ensure appropriate safeguards are in place as required by applicable data protection law, such as standard contractual clauses.
10. Audits
Logistiq will make available information reasonably necessary to demonstrate compliance with this DPA, including security documentation, and will allow for audits as required by applicable law, subject to reasonable notice and confidentiality.
11. Deletion and return
Upon termination of the Services, Logistiq will delete or return Customer Personal Data in accordance with the agreement, unless retention is required by law.
12. Contact
To request a countersigned copy of this DPA or the subprocessor list, contact privacy@logistiq.app.
Related policies: Terms of Service · Privacy Policy · Cookie Policy · Acceptable Use Policy · Service Level Agreement · Accessibility Statement · Trust Center