Privacy Notice

Zonalia is operated by Aurum Digital Consulting Limited. This Notice explains how Aurum handles personal data when you visit Zonalia, create or use an account, communicate with us, use trade-workspace features, or otherwise interact with services for which Aurum determines the purpose and means of processing.

Where an organisational customer submits personal data about its personnel, suppliers, buyers or other counterparties and Aurum processes that data solely on the customer's instructions, the customer is generally the controller and Aurum acts as processor under the Data Processing Addendum.

Depending on how Zonalia is used, we may process account and contact information; authentication and security data; organisation/workspace information; support and correspondence records; billing or transaction references supplied by payment providers; device, browser, IP and service-log information; preferences and consent records; and information you choose to include in trade records, tasks, notes or counterparty fields.

Zonalia is not intended as a repository for payment-card credentials, passwords belonging to other services, biometric templates, government identity databases or unnecessary sensitive personal data. Users should avoid entering such data unless a specific authorised workflow expressly requires it.

We process personal data to provide and administer accounts and workspaces; authenticate users and protect the service; deliver requested features; communicate about the service; provide support; process subscriptions and maintain billing records; diagnose faults; prevent fraud, abuse and security incidents; maintain audit and operational records; comply with law; establish or defend legal claims; and improve Zonalia using appropriately minimised or de-identified information where practicable.

Depending on the processing, Aurum may rely on performance of a contract or steps requested before a contract, compliance with legal obligations, legitimate interests that do not override applicable data-subject rights, or consent where consent is required. Where we rely on consent, it may be withdrawn prospectively through the relevant control or by contacting us.

Necessary cookies or equivalent technologies may be used for authentication, security, session continuity, network stability, accessibility and other core functionality. Where non-essential analytics, advertising or other tracking technologies require consent, they should not be activated until the visitor has been given a clear choice to accept or reject them.

Where applicable, Zonalia will provide a conspicuous cookie control explaining the relevant purposes and how consent can be changed or withdrawn. Rejecting non-essential cookies should not prevent access to core functionality that does not depend on them.

Zonalia may use rules-based or AI-assisted features to organise information, identify operational exceptions, rank trade risk, summarise workflow state or recommend next actions. These features are designed as operational decision support. We do not intend to make solely automated decisions about individuals that produce legal or similarly significant effects without an appropriate lawful basis, safeguards and any consent required by applicable law.

We may disclose personal data to vetted service providers supporting hosting, databases, storage, authentication, email, monitoring, customer support, payments and other necessary infrastructure; to professional advisers under duties of confidentiality; to authorities where disclosure is legally required; or in connection with a legitimate corporate transaction subject to appropriate safeguards. We do not sell personal data.

Some service providers may process data outside Nigeria. Where an international transfer is subject to the Nigeria Data Protection Act 2023, Aurum will use an applicable lawful transfer mechanism and appropriate safeguards, taking account of the destination, recipient and nature of the processing.

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including account administration, service delivery, security, dispute handling, audit, tax and other legal obligations. Retention periods vary by data category and context. Data may be deleted, anonymised or retained for a longer period where law or a legitimate legal claim requires it.

We use technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, authentication, transport encryption, provider security controls, logging, least-privilege access and database-level separation. No internet service can guarantee absolute security.

Subject to the Nigeria Data Protection Act 2023 and other applicable law, you may have rights to information about processing, access, correction, deletion, restriction, objection, portability where applicable, withdrawal of consent, and safeguards relating to qualifying automated decision-making. Rights may be limited where an exemption or competing legal obligation applies.

You can submit a request through our Data Request page or contact us directly. We may need to verify identity before acting on a request.

Zonalia is a business trade-operations service and is not directed to children. Users must not intentionally submit children's personal data unless a lawful, necessary and specifically authorised use case exists and all required safeguards and consents have been satisfied.

If you have a privacy concern, contact Aurum first so we can investigate it. You may also have the right to lodge a complaint with the Nigeria Data Protection Commission or another competent supervisory authority.

We may update this Notice as Zonalia, our service providers or applicable law changes. Material changes will be reflected by a revised effective date and, where appropriate, additional notice.

Privacy questions and requests may be sent to hello@aurumdigitalconsulting.com. For business-customer processing terms, see the DPA; for platform use, see the Terms of Service.