Data Processing Agreement

Version 1.0 — fill in date

Starter DPA — replace before publishing. Required for B2B GDPR compliance. See `docs/shopify-baseline.md` §10 for the content checklist (subject matter, processing categories, data subjects, processor obligations, sub-processor list, transfer mechanism, audit clause, return/deletion on termination).