Fasty Connector Data Processing Addendum

Last updated: August 2, 2026

This Data Processing Addendum (“DPA”) forms part of the agreement between the Shopify merchant (“Merchant”) and FIRMA LUI ADI SRL, Romania (“Processor”) for use of Fasty Connector.

Instructions and purpose

Processor handles customer data only on Merchant's documented instructions to create and manage Speedy shipments. Processing is limited to order identifiers, recipient name, address, phone, and email when required for international delivery.

Confidentiality and security

Processor applies data minimization, least-privilege access, HTTPS in transit, encryption for carrier credentials at rest, environment separation, access logging, encrypted-backup requirements, and an incident response process. Personnel with access are bound to confidentiality and use strong authentication.

Subprocessing and international transfers

Shopify supplies order data and Speedy receives shipment data as the carrier chosen by Merchant. Infrastructure providers may process encrypted or operational data only as necessary to host the service and under appropriate data protection terms.

Retention, deletion, and assistance

Recipient fields read from Shopify are processed transiently. AWB-only corrections explicitly saved by Merchant are encrypted at rest, retained for no longer than 90 days, and removed by applicable privacy webhooks. Processor supports Shopify's mandatory privacy webhooks and assists Merchant with data-subject requests, security inquiries, and legally required incident notifications. Speedy credentials, settings, shipment records, and job records are deleted when the app is uninstalled; Shopify's later shop-redaction webhook removes any remaining shop and audit record, except where retention is legally required.

Contact: ciocan.adr08@gmail.com