Privacy

Data Processing Agreement

Processor-controller terms for enterprise Sellers (future).

Last updated 25 July 2026 1 min read Version 1.0
This Data Processing Agreement (DPA) is intended for enterprise customers that require formal processor-controller terms under POPIA, and where applicable, the GDPR.

1. Roles

For personal information of Buyers processed on a Seller's store, the Seller is the Responsible Party (Controller) and LIYAD is the Operator (Processor).

2. Scope & purpose

LIYAD processes personal information only to provide the Platform, in accordance with documented instructions from the Seller.

3. Security measures

LIYAD implements appropriate technical and organisational measures, as described in the Security Centre.

4. Sub-processors

The Seller authorises LIYAD to engage the sub-processors listed in the Privacy Policy. LIYAD will notify the Seller of material changes.

5. International transfers

Where personal information is transferred outside South Africa or the EU, appropriate safeguards will be applied.

6. Term & termination

This DPA remains in effect for the duration of the Seller's subscription. On termination, LIYAD will return or delete personal information in accordance with the Terms of Service.

Platform responsibility statement

LIYAD is a software platform that enables independent sellers to create and manage online stores. LIYAD is not the seller of products listed on the platform. Unless LIYAD is explicitly identified as the merchant for a specific transaction, it does not manufacture, own, warehouse, inspect, guarantee, endorse or deliver products sold by independent sellers. Each seller is solely responsible for product quality, pricing, legal compliance, fulfilment, customer support, refunds, warranties and tax obligations.

Version history

  • v1.02026/07/25Initial draft — enterprise offering forthcoming.

Questions about this document?

Our team acknowledges every message within two business days.