Last updated: April 27, 2025
This Data Processing Addendum ("DPA") forms part of the Terms of Use and governs Zugi Ventures Limited’s processing of personal data on behalf of users ("User", "you", "your") in connection with your use of Zugi.ai’s Services.
1. Definitions
- "Data Protection Laws" means all applicable laws regarding data protection, including GDPR, UK GDPR, and CCPA.
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation performed on Personal Data, whether automated or not.
2. Roles of the Parties
- You act as the "Data Controller".
- Zugi Ventures Limited acts as the "Data Processor".
You determine the purpose and means of processing Personal Data; we process it solely on your behalf.
3. Nature and Purpose of Processing
- Nature: Storage, retrieval, analysis, communication, and deletion.
- Purpose: To provide the Services as described in the Terms of Use.
4. Duration of Processing
We will process Personal Data for as long as necessary to provide the Services or as otherwise required by law.
5. Data Subject Rights
We assist you in responding to requests from individuals exercising their rights under Data Protection Laws, including access, correction, deletion, and data portability requests.
6. Sub-Processors
We may engage trusted third-party sub-processors (e.g., hosting providers, analytics partners) to help deliver our Services.
A current list of sub-processors can be provided upon request.
We remain responsible for their actions and ensure they meet equivalent data protection standards.
7. International Transfers
Where Personal Data is transferred outside the UK or European Economic Area (EEA), we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs).
8. Security Measures
We implement technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular monitoring.
9. Data Breach Notification
In the event of a confirmed Personal Data breach, we will notify you without undue delay, providing sufficient information for you to meet any legal obligations.
10. Deletion or Return of Personal Data
Upon termination of your account or at your request, we will delete or return Personal Data, unless retention is required by law.
11. Governing Law
This DPA is governed by the laws of England and Wales.
