Data Processing Agreement (DPA)

For clients, vendors, and partners

Last updated: August 12, 2026

1. Purpose

This Data Processing Agreement ("DPA") governs how FoodWare Hub and Allied Services Ltd. ("Processor") handles personal data on behalf of its clients ("Controller") in compliance with the NDPA and NDPR.

2. Definitions

• Controller: Entity determining the purpose of data processing
• Processor: Entity processing data on behalf of the Controller
• Personal Data: Any information relating to an identifiable person
• Processing: Any operation performed on personal data

3. Obligations of the Processor

FoodWare Hub agrees to:

• Process data only on documented instructions
• Maintain confidentiality
• Implement appropriate security measures
• Assist the Controller with data subject requests
• Notify the Controller of data breaches within 72 hours
• Delete or return personal data upon termination

4. Sub-Processors

We may engage third-party sub-processors (e.g., hosting providers, payment processors). We ensure all sub-processors comply with NDPA/NDPR.

5. International Transfers

Data may be transferred outside Nigeria only with adequate safeguards and compliance with NDPA/NDPR.

6. Audit Rights

The Controller may request audits or compliance reports. Reasonable notice is required.

7. Termination

Upon termination, all personal data will be:

• Returned to the Controller, or
• Securely deleted

8. Governing Law

This DPA is governed by Nigerian law.

Contact

• Email: foodwarehuballied@gmail.com
• Phone: +234 813 340 1215 / +234 708 815 0604