Data Processing Agreement

This Data Processing Agreement (DPA) forms part of the relationship between Egwu and users whose personal data is processed through the Platform. It applies where applicable privacy laws require data processing obligations to be set out in writing.

Scope

This DPA applies wherever privacy laws (including NDPR, GDPR, and similar frameworks) impose data processing obligations on Egwu as a data processor or controller in relation to user data.

Processing Activities

Egwu may process personal information for the following purposes:

• Account creation and management
• Payment processing and payout distribution
• Customer support and dispute resolution
• Platform functionality and feature delivery
• Security, fraud prevention, and compliance

Security Measures

Egwu implements reasonable technical and organizational safeguards to protect personal data against unauthorized access, disclosure, alteration, or destruction. These include access controls, encryption where appropriate, and regular security reviews.

Third-Party Processors

Egwu may engage sub-processors (service providers) to assist with:

• Cloud infrastructure and hosting
• Analytics and performance monitoring
• Payment processing
• Customer support tooling

All sub-processors are required to implement appropriate data protection safeguards and are bound by contractual obligations.

International Data Transfers

Where personal data is transferred internationally, Egwu will take reasonable measures to ensure lawful processing and adequate protection, in accordance with applicable privacy legislation.

User Rights

Subject to applicable law, users may exercise rights including access, correction, deletion, and portability of their personal data. Requests may be submitted to info@egwu.africa.

Contact