Legal
Data Processing Agreement
Last updated: May 2026
1. Scope and Purpose
This Data Processing Agreement (DPA) forms part of the Terms of Service between Alexa-May Logistics (the Processor) and the Customer (the Controller) and governs the processing of personal data on behalf of the Customer.
2. Definitions
Personal Data, Controller, Processor, and Processing have the meanings given in the Nigeria Data Protection Regulation (NDPR) 2019. Sub-processor means any third party engaged by the Processor to process Personal Data.
3. Processing Instructions
The Processor shall process Personal Data only on documented instructions from the Controller, including for the purpose of providing the Wuber fleet management platform and related services.
4. Confidentiality
The Processor shall ensure that all personnel authorised to process Personal Data are subject to appropriate confidentiality obligations and receive data protection training.
5. Security Measures
The Processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, audit logging, and regular security assessments.
6. Sub-processors
The Processor may engage sub-processors to assist in providing the services, including cloud infrastructure providers, payment processors, and communication services. A list of current sub-processors is available on request.
7. Data Subject Rights
The Processor shall assist the Controller in responding to requests from data subjects exercising their rights under the NDPR, including rights of access, rectification, erasure, and data portability.
8. Data Breach Notification
The Processor shall notify the Controller without undue delay, and in any event within 72 hours, of becoming aware of a personal data breach affecting the Controllers data.
9. Data Deletion
Upon termination of the services, the Processor shall, at the Controllers choice, delete or return all Personal Data and delete existing copies within 30 days, unless retention is required by law.
10. Audit Rights
The Controller may conduct or commission audits of the Processors data processing activities, subject to reasonable notice and the Processors security requirements. Audit costs are borne by the Controller.
11. Governing Law
This DPA is governed by the laws of the Federal Republic of Nigeria. For Enterprise customers, a signed DPA is available upon request. Contact contact@wuber.com.ng.