Data Processing Addendum

Last updated October 30, 2026

This addendum is part of the Terms of service between the shop (“you”, the controller) and Dopamine Flowers LLC (“we”, the processor). It applies when FloristPilot processes personal data about your customers and staff.

1. What we process and why

The personal data, purposes and duration are described in our Privacy policy: customer and recipient contact and delivery details, card messages, order details, staff contact details, and (if you turn them on) calls, texts and driver location, for running the features you use.

2. Your instructions

We process this data only to provide FloristPilot to you, following your documented instructions (your settings and use of the app). If we believe an instruction breaks the law, we will tell you.

3. Confidentiality

Only people who need access to run or support the service can reach your data, and they are bound to keep it confidential.

4. Security

We keep technical and organizational measures in place to protect the data, described on our Security page, and keep them up to date.

5. Sub-processors

You allow us to use the sub-processors listed in the Privacy policy. We hold each one to data protection terms at least as protective as these. We will post changes to the list before they take effect; if you object, you may stop using the affected feature or uninstall.

6. Personal data breaches

If we become aware of a breach affecting your data, we will tell you without undue delay and within 72 hours, with what we know, what we are doing about it, and what you may need to do.

7. Helping you

We help you answer people who exercise their privacy rights (access, correction, deletion) and with data protection assessments where reasonable. Shopify’s privacy requests reach us automatically and we act on them.

8. Deletion

When you uninstall, Shopify notifies us after 48 hours and we delete your shop’s data. Encrypted backups expire within 28 days after that.

9. Transfers

We host the data in the United States. Where data protection law requires safeguards for transfers, we rely on appropriate mechanisms such as the EU Standard Contractual Clauses.

10. Checking our work

On request we will give you the information you reasonably need to show these obligations are met.

Contact for data protection questions: hello@floristpilot.com.