Contractual terms that apply whenever Resman processes personal data on your behalf as your Data Processor under the Nigeria Data Protection Act 2023.
Version 2026-04-19 · Last updated: April 19, 2026You are the Controller. Resman is your Processor. This DPA covers the processing of Personal Data by Resman strictly to deliver the Service as described in the Terms. Details of the processing:
Resman will process Personal Data only on your documented instructions, which consist of the Terms, this DPA, and any configuration choices you make in the Service. Resman will notify you if an instruction appears to infringe the NDPA or other applicable law and may decline to carry it out.
Aggregated and anonymised data. You acknowledge and agree that Resman may create and retain aggregated or anonymised data derived from the Personal Data for the purposes set out in Section 11.2 of the Privacy Policy (Service improvement, Resman's own model training, and aggregated market insights). Once data has been effectively anonymised it is no longer Personal Data, and Resman's use of it is not restricted by this DPA. Resman will not reverse the anonymisation, and will not sell identifiable Personal Data.
Resman will ensure that personnel authorised to process Personal Data are bound by written confidentiality obligations (or are under an appropriate statutory duty of confidentiality) and receive training on their data-protection responsibilities.
Resman will implement and maintain appropriate technical and organisational measures to protect Personal Data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration, or disclosure. Current measures are summarised in Section 9 of the Privacy Policy and include:
You grant Resman general authorisation to engage Sub-processors. Current Sub-processors are listed in Section 6.1 of the Privacy Policy. Resman will:
You may reasonably object to a new Sub-processor on data-protection grounds. If we cannot accommodate your objection, you may terminate the affected part of the Service for cause without penalty.
Resman will, to the extent legally permitted, provide reasonable assistance to help you respond to Data Subject requests under the NDPA. Where a Data Subject contacts Resman directly about Personal Data you control, Resman will redirect them to you and notify you without undue delay.
Resman will notify you without undue delay — and in any case within 72 hours — of becoming aware of a Personal Data breach affecting your Customer Data, and will provide reasonable information to help you meet your own NDPA notification duties, including:
On reasonable prior written notice — not more than once per 12-month period, unless a regulator requires more — Resman will make available information necessary to demonstrate compliance with this DPA. Where you reasonably require additional audit, Resman will cooperate with an independent auditor bound by confidentiality, at your cost, under a mutually agreed scope that does not unduly disrupt operations or compromise the confidentiality of other customers.
Where processing involves the transfer of Personal Data outside Nigeria, Resman will rely on a transfer mechanism recognised by the NDPC (e.g., adequacy, standard contractual clauses, or explicit consent) and incorporate it by reference in this DPA as needed.
On termination of the Terms, Resman will (a) allow you 90 days to export your Customer Data using the Service's export tools; and (b) thereafter delete or anonymise your Customer Data, except to the extent retention is required by law or remains in routine backups (which will age out within the normal backup cycle).
In the event of a conflict between this DPA and any other agreement between the parties relating to the processing of Personal Data, this DPA prevails for that processing.
Each party's liability under this DPA is subject to the limitations of liability in Section 19 of the Terms.
Resman may update this DPA to reflect legal, regulatory, or operational developments. Material changes are notified at least 14 days in advance to the Owner.
