1. When this DPA applies
This Data Processing Agreement (DPA) applies when a business customer (Controller) uses AfripayStudio such that Afrigates Digital Limited processes personal data on the Controller’s documented instructions (for example hosting lead forms or buyer records for the Controller’s offers), and the parties have agreed this DPA applies (including via Business/Enterprise terms).
2. Roles
Controller determines the purposes of processing customer/end-user data collected for the Controller’s business. Afripay acts as processor for that hosted processing, and remains controller for its own account, billing, and security data as described in the Privacy Policy.
3. Obligations
- Process only on documented instructions.
- Ensure confidentiality of personnel.
- Implement appropriate security measures.
- Assist with data-subject requests and breach notices as required by NDPA and the contract.
- Use sub-processors under appropriate terms; maintain a reasonable sub-processor list on request.
- Delete or return Controller data after end of services, subject to legal retention.
4. Contact
DPA and enterprise privacy: hello@afripaystudio.com