Data processing terms
These terms are part of our terms of service and apply when Vikalp Omni processes personal data about your customers. They’re written with the GDPR, the UK GDPR and India’s Digital Personal Data Protection Act, 2023 in mind.
Who does what
For customers’ personal data, the merchant is the controller and Vikalp Omni is the processor. For merchants’ own account details, Vikalp Omni is the controller, as described in the privacy policy.
Only on your instructions
We process customers’ data only to run the features you switch on in Vikalp Omni, and as these terms and the law require. We don’t sell it, use it for advertising, or combine it with other stores’ data.
Confidentiality
Everyone at Vikalp Omni who can reach personal data is bound to keep it confidential and has access only as far as their work needs.
Security
We keep the measures on our security page in place, and improve them over time without lowering protection.
Sub-processors
You agree to the companies on our sub-processors page. We give each one the same data protection duties, stay responsible for them, and tell you before adding a new one so you can object.
Helping you
We help you answer customers’ requests to see, correct or delete their data. Shopify’s customer data and deletion requests are handled automatically.
Data breaches
If a breach affects your customers’ data, we tell you without undue delay, and within 72 hours of learning of it, with what we know and what we’re doing.
Deletion
When you uninstall, Shopify asks us to delete your store’s data (at least 48 hours later) and we do, retrying until it is done and recording when. Database backups expire within days and, if one is ever restored, recorded deletions are applied again. Records the law requires us to keep, such as billing, are kept only as long as required.
International transfers
Data may be processed outside your country. Where the law requires it, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses.
Audits
We answer reasonable questions about how we protect data, and share summaries of our security measures on request.
A signed copy
If your business needs a signed data processing agreement, write to support@vikalpomni.com with your store’s address.