Data Processing Agreement

1. Definitions

• Personal Data – Any information relating to an identified or identifiable individual.
• Data Controller – The party who determines the purposes and means of processing personal data.
• Data Processor – The party who processes personal data on behalf of the controller.
• Processing – Any operation or set of operations performed on personal data (e.g., collection, storage, access).
• Data Subject – The individual whose data is being processed.

2. Scope of Processing

SellersPro shall process personal data solely to provide services including:

• Customer messaging and order management
• AI-based order recognition
• Receipt generation, order tracking, and business automation
• Synchronization of social media communications

Processor will not process personal data for its own purposes.

3. Types of Personal Data Processed

The personal data processed may include (but is not limited to):

• Names, phone numbers, and email addresses of customers
• Delivery addresses and transaction details
• Social media interactions and inbox messages (from platforms like Facebook, Instagram, WhatsApp, X)
• Order-related content entered via AI tools

4. Obligations of the Processor (SellersPro)

SellersPro agrees to:

• Process personal data only on documented instructions from the Controller
• Ensure persons authorized to process the data are bound by confidentiality
• Implement appropriate technical and organizational measures to ensure data security
• Assist the Controller in fulfilling obligations related to data subject rights (e.g., access, deletion)
• Notify the Controller promptly of any data breach
• Delete or return personal data upon termination of services

5. Sub-Processors

SellersPro may engage third-party service providers (e.g., hosting, analytics) as sub-processors. A list of current sub-processors will be made available upon request.

SellersPro shall ensure that:

• Sub-processors are bound by equivalent data protection obligations
• Controllers will be notified of any changes in sub-processors, and have the right to object on reasonable grounds

6. International Data Transfers

If data is transferred outside of Nigeria or the EEA, SellersPro will ensure:

• Adequate safeguards are in place (e.g., Standard Contractual Clauses, DPA-compliant partners)
• Compliance with applicable data transfer laws

7. Rights of the Controller

The Controller retains all rights to the personal data and may:

• Request correction, deletion, or access to personal data
• Withdraw consent to processing (in accordance with applicable law)
• Audit Processor's data protection practices, with reasonable notice and limits

8. Duration and Termination

This Agreement is valid for the duration of the Controller's use of SellersPro services.

Upon termination, SellersPro will:

• Delete or return all personal data within 30 days (unless required by law to retain it)
• Cease all further processing of Controller data

9. Liability

Each party shall be liable for its own violations of applicable data protection laws.

SellersPro's liability is limited as outlined in the main Terms and Conditions, except where prohibited by law.

10. Governing Law

This Agreement shall be governed by and interpreted in accordance with the laws of the Federal Republic of Nigeria, without regard to conflict of laws principles.

11. Contact Information

For inquiries about this Agreement or data processing practices, contact: