Data Processing Agreement
Version 1.0 — effective 6 July 2026.
This Data Processing Agreement ("DPA") forms part of the Terms of Service between Kinglify (processor) and the organisation (controller) for personal data processed through the Platform.
1. Roles
The organisation is the controller and determines the purposes of processing member and customer data. Kinglify processes such data only on documented instructions from the organisation.
2. Subject matter & duration
Processing lasts for the term of the organisation's use of the Platform and covers the data necessary to provide the services.
3. Kinglify's obligations
- Process personal data only on the controller's instructions.
- Ensure persons authorised to process are bound by confidentiality.
- Implement appropriate technical and organisational security measures.
- Assist the controller with data-subject requests and breach notifications.
- Delete or return personal data at the end of the services, subject to legal retention.
4. Sub-processors
Kinglify uses vetted sub-processors (hosting, payments, email) under written terms consistent with this DPA and will inform the controller of material changes.
5. International transfers
Transfers outside Nigeria are made only with appropriate safeguards under the NDPA.
6. Breach notification
Kinglify will notify the controller without undue delay after becoming aware of a personal-data breach affecting the controller's data.
7. Audits
Kinglify will make available information reasonably necessary to demonstrate compliance.
8. Contact
privacy@kinglify.com.