Skip to content
Enrixa IndiaPost
Menu
Request early access

Data processing terms

Last updated 16 October 2026

These terms apply between Seamedia E-commerce Solutions and every store that installs Enrixa IndiaPost. They form part of our terms of service, and a store accepts them by installing the app.

  1. Roles. The store is the controller (data fiduciary) of its customers’ personal data. We process that data only on the store’s behalf and on its documented instructions, which are the app’s settings and the actions the store takes in it.
  2. Purpose. We process customers’ names, shipping addresses and phone numbers only to book, label, fulfil and track the store’s shipments. Processing follows applicable law, including India’s Digital Personal Data Protection Act 2023 and, where it applies, the GDPR.
  3. Confidentiality. Only authorised personnel bound by confidentiality can access the data, and only when they need to.
  4. Security. We maintain the measures described on our security page: encryption at rest and in transit, encrypted backups, access control and access logging, separate test and production data, and an incident response process.
  5. Sub-processors. We use the following, and will tell stores before adding a new one:
    • India Post (Department of Posts): delivering the parcel
    • Shopify: the platform the app runs on
    • Amazon Web Services (Lightsail): server hosting in Mumbai, India
    • Cloudflare: domain name service, and storage of encrypted backups (R2) in the European Union
    • Unicommerce: only for stores that connect their own Uniware account (courier and article ID updates, invoices, stock)
    • Hostinger International Ltd.: sending staff notification emails (recipients, order numbers and article IDs; never customers’ details)
  6. Data subject requests. We help the store answer access and erasure requests, including automatically through Shopify’s customer data request and erasure notifications.
  7. Breach notification. We notify the store without undue delay after becoming aware of a personal data breach, and give it the information it needs to meet its own obligations.
  8. Retention and deletion. We keep data only for the periods in our privacy policy, and delete all of a store’s data after it uninstalls the app.
  9. No sale or other use. We don’t sell the data or use it for our own purposes.
  10. Audit. On reasonable request, we provide information that shows we comply with these terms.

Questions about these terms: support@myenrixa.com.