Simple Delivery Data Processing Agreement
Version 1.0, 4 September 2026
This agreement governs personal data that Simple Delivery, operated by Succi Inc ("the Processor"), processes on behalf of a merchant ("the Controller") who installs the app. It takes effect on installation. The Processor can be contacted at succiinc@proton.me.
1. Roles
The Controller determines why and how their customers' personal data is processed. The Processor acts only on the Controller's documented instructions, which for this app means: the settings the merchant configures, and the delivery and collection scheduling the app performs.
2. Scope of processing
| Subject matter | Scheduling delivery and collection for the Controller's orders |
| Duration | While the app is installed, plus the retention periods below |
| Categories of data subject | The Controller's customers who place delivery or collection orders |
| Categories of personal data | Delivery address (stored only as a one-way hash), approximate coordinates rounded to about 100 metres, vehicle registration, delivery notes, order identifiers, and for addresses outside every zone the street name without its house number |
| Excluded | Names, email addresses, phone numbers, payment data. Never processed |
3. Processor obligations
The Processor will:
- Process personal data only on the Controller's instructions, and tell the Controller if an instruction appears to breach applicable law.
- Keep personal data confidential and ensure anyone with access is bound to confidentiality.
- Apply the technical and organisational measures in the accompanying security policies: encryption in transit and at rest, deny-by-default database access, access logging, scheduled deletion, and separation of test and production data.
- Not engage a new sub-processor without notice to the Controller, who may object.
- Assist the Controller with data subject requests, including through Shopify's compliance webhooks.
- Notify the Controller without undue delay after becoming aware of a personal data breach, with the information needed for the Controller's own notification duties.
- Delete personal data on uninstall, in line with the retention schedule.
- Make available the information needed to demonstrate compliance, and allow audits on reasonable notice.
4. Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud Run | Application hosting | Sydney, Australia |
| Supabase (AWS) | Database hosting | Sydney, Australia |
| Google Maps Platform | Address geocoding | Global |
5. Retention and deletion
| Data | Deleted |
|---|---|
| Vehicle registration | When the order is marked complete; swept after 30 days regardless |
| Geocode cache entries | 180 days after last use |
| Access log | 365 days |
| Out-of-zone records | 365 days |
| All shop data | On shop/redact, 48 hours after uninstall |
6. International transfers
Data is held in Australia. The application runs in Google Cloud's Sydney region and the database in Supabase's Sydney region, so delivery addresses and everything derived from them stay onshore.
The one exception is geocoding: turning an address into coordinates may be processed outside Australia by Google. Results are cached so a given address is sent at most once, and what we store from the result is a one-way hash plus coordinates rounded to about 100 metres, never the address itself.
7. Liability
Nothing in this agreement limits either party's obligations under applicable data protection law, including the Australian Privacy Act 1988.