Data Processing Addendum
This DPA describes how Aurum Digital Consulting Limited ("Aurum", "we") processes data on behalf of Zonalia enterprise customers ("you"), including company details, incorporation documents, board resolutions, tax identification numbers, and directors' personal identification uploaded to the Zonalia platform.
1. Roles
You are the data controller for the personal and company data you upload to Zonalia. Aurum acts as a data processor, processing that data solely to provide the Zonalia service — application preparation, duty and compliance tooling, document storage, and related features you use.
2. Scope of processing
Aurum processes the data you upload only as needed to: generate your application package, run duty and HS code estimates, cross-check company details against public CAC records, store your documents, and provide any B2B API access you've subscribed to. Aurum does not sell your data or use it for purposes unrelated to providing the service.
3. Security measures
Data is encrypted at rest (AES-256) and in transit (TLS), hosted on infrastructure provided by our cloud database provider. Access to stored documents is restricted at the database level to your own application records.
4. Sub-processors
Aurum uses the following categories of sub-processor to deliver the Zonalia service: cloud database and file storage, transactional email delivery, and payment processing. We will not add a new category of sub-processor that materially changes how your data is handled without updating this page.
5. Data retention, export, and deletion
We retain your data for as long as your application or account is active, or as needed to comply with our own legal obligations. You may request an export or deletion of your data at any time via our data request form.
6. International transfers
Where data is processed or stored outside Nigeria by a sub-processor, we take reasonable steps to ensure it remains protected to a standard consistent with the Nigeria Data Protection Act.
7. Related notices
See our Terms of Service and Disclaimer & Affiliation Notice.