Compliance: NDPA and GDPR

QuiQSol is built for businesses that hold customer data and answer to regulators for it. This page sets out the data protection laws we work to, where data is hosted, and every sub-processor that helps us run the Service.

Data protection laws

QuiQSol is a Nigerian company, registered with the Nigeria Data Protection Commission (NDPC) as a data controller, and works to the Nigeria Data Protection Act 2023 (NDPA) and the NDPC’s General Application and Implementation Directive 2025 (GAID).

For customers and visitors in the European Economic Area and the UK we work to the EU General Data Protection Regulation (GDPR) and the UK GDPR; see our GDPR Compliance page. For recipients in the United States, marketing email sent through QuiQSol carries the sender’s identity, postal address and a working unsubscribe link, as the CAN-SPAM Act requires; see our Anti-spam Policy.

Where data is hosted

The QuiQSol application runs on Vercel in its Paris (France) region, and the main database runs on MongoDB Atlas in the European Union. Files are stored on Amazon Web Services. Some sub-processors below operate from the United States. Every transfer outside Nigeria relies on a lawful basis under Part VIII of the NDPA, such as contractual data protection terms with the receiving provider.

Data Processing Agreement

Business customers can sign our Data Processing Agreement, covering QuiQSol’s processing of Customer Data on their instructions, by emailing privacy@quiqsol.com.

Security reviews

We review the platform for security and data protection gaps every month and fix what we find. Enterprise customers can request a completed security questionnaire through privacy@quiqsol.com. See our Security page for the controls in place.

The companies that process data for us are listed under Sub-processors.

GDPR

For customers and users in the European Economic Area and UK, this page summarizes how QuiQSol processes personal data in line with the GDPR/UK GDPR, in addition to our general Privacy Policy.

Roles

For Customer Data you input into QuiQSol (your contacts, tickets, campaign recipients), your organization is the data controller and QuiQSol acts as data processor, processing that data only on your documented instructions via the Service.

For account and billing data collected directly from you as our customer, QuiQSol acts as data controller.

Legal basis for processing

We process account data to perform our contract with you (providing the Service), and limited additional data based on legitimate interest (security, fraud prevention) or consent (marketing communications you’ve opted into).

Data Processing Agreement

Organizations subject to GDPR can sign our Data Processing Agreement (DPA) covering QuiQSol’s processing of Customer Data, with Standard Contractual Clauses for international transfers, by emailing privacy@quiqsol.com. Our sub-processors are listed on the Compliance page.

Data subject rights

Individuals have the right to access, rectify, erase, restrict, or port their personal data, and to object to certain processing. Where QuiQSol is the processor, we support your organization in fulfilling these requests through in-app export/delete tools and, where needed, direct assistance from our team.

International transfers & breach notification

Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses. In the event of a personal data breach affecting Customer Data, we will notify affected organizations without undue delay so they can meet their own regulatory notification obligations.