Data Processing Agreement
Effective date: 7 September 2026 · Dinjan Consultancy Limited, Ahmedabad
This Data Processing Agreement (‘DPA’) applies where Dinjan Consultancy Limited, trading as Segnol ERP, processes personal data on behalf of a Customer in the course of providing the Services. It forms part of the Terms & Conditions and gives effect to the commitments already made in the Privacy Policy. It creates no obligation on the Customer beyond those documents.
1. Scope and roles
The role each party plays depends on the processing in question. For employee and workforce data entered into the Services by a Customer, the Customer is the Data Fiduciary (controller) and determines why and how that information is processed; Segnol ERP acts as a Data Processor and processes that information on the Customer’s behalf and according to the Customer’s instructions.
For Customer accounts, administrators, billing, subscriptions, website visitors, prospects and Segnol ERP’s own business operations, Segnol ERP determines the purposes and means of processing and acts as a Data Fiduciary in its own right. That processing is governed by the Privacy Policy and not by this DPA.
This DPA applies only where Segnol ERP acts as a Data Processor.
2. Details of the processing
The following describes the processing Segnol ERP carries out on the Customer’s behalf.
| Item | Detail |
|---|---|
| Subject matter | Provision of the Segnol ERP platform and related services to the Customer |
| Duration | The Subscription Term, plus the post-termination export period described in section 11 |
| Nature of processing | Hosting, processing, transmission, back-up, support, security, troubleshooting and operation of the Services |
| Purpose | Payroll, attendance, leave, HR and ERP functionality, statutory calculations and reports, and related support, as configured by the Customer |
| Categories of Data Principals | The Customer’s employees, workers, contractors, applicants and, where recorded by the Customer, their nominees and dependants; the Customer’s administrators and Authorised Users |
| Types of personal data | Identity and contact details; employment, attendance, leave and shift records; salary, payroll and wage data; bank and payment details; statutory and government identifiers; documents uploaded by the Customer; and other information the Customer configures the Services to hold |
3. Processing on documented instructions
Segnol ERP will process Customer Data only to provide the Services and on the Customer’s documented instructions, which include the Terms & Conditions, the applicable Order Form, this DPA and the Customer’s configuration of and use of the Services, unless processing is required by applicable law.
The Customer retains ownership of Customer Data and grants Segnol ERP the limited rights necessary to host, process, transmit, back up, support, secure, troubleshoot and operate the Services.
4. Customer obligations
As Data Fiduciary, the Customer is responsible for:
5. Confidentiality
Segnol ERP personnel authorised to process Customer Data are bound by employee confidentiality obligations and are granted access on a least-privilege basis.
6. Security measures
Segnol ERP implements reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, destruction, alteration, disclosure, misuse and other unlawful processing, and maintains reasonable administrative, technical and organisational safeguards designed to protect the Services and Customer Data. These include:
7. Sub-processors
The Customer authorises Segnol ERP to appoint third-party service providers to process Customer Data on its behalf for purposes necessary to provide, secure and operate the Services, including cloud hosting, infrastructure, payments, communications, security, monitoring, support, analytics and professional services.
Segnol ERP will require appropriate contractual confidentiality and data-protection obligations from each such provider, and remains responsible to the Customer for its sub-processors’ performance of the obligations in this DPA.
8. Assistance with Data Principal requests
Where a Data Principal contacts Segnol ERP directly about Customer Data, Segnol ERP will refer that person to the Customer as Data Fiduciary.
Segnol ERP will provide reasonable assistance to enable the Customer to respond to requests to access, correct, complete, update or erase personal data, to grievance redressal, and to nomination requests, to the extent the Customer cannot do so through the functionality of the Services and to the extent required by applicable law.
9. Personal data breach
If Segnol ERP becomes aware of a security incident affecting personal data processed on the Customer’s behalf, it will investigate, contain and remediate the incident, assess its nature and extent, notify the affected Customer without undue delay where required by applicable law or contract, and cooperate with the Customer and with regulators where required.
Segnol ERP does not make a blanket contractual promise of a specific notification period unless separately agreed in writing and operationally supported.
10. International transfers
For the current India deployment, Customer Data is primarily hosted and stored in India. Segnol ERP may use carefully selected infrastructure providers, service providers or support resources located in other jurisdictions where reasonably necessary to provide, secure, support or operate the Services.
Where personal information is transferred internationally, Segnol ERP will take reasonable steps to ensure that such processing and transfers are carried out in accordance with applicable law and appropriate contractual, organisational and technical safeguards.
11. Return and deletion of Customer Data
The Customer may export Customer Data using available functionality at any time during the Subscription Term.
Upon termination, Customer Data will remain available for export for the period specified in the applicable Order Form or, where no different period is specified, 60 calendar days. After that period Segnol ERP may permanently delete or anonymise Customer Data in accordance with its data-retention procedures, subject to applicable legal requirements, backup cycles, security requirements and legitimate dispute-resolution obligations.
Backups may follow applicable rolling backup cycles; audit and security logs, billing and tax records and support records may be retained for periods reasonably necessary or required by law.
12. Information and audit
Segnol ERP will make available to the Customer, on reasonable written request and no more than once in any twelve-month period unless required by a regulator or following a personal data breach, information reasonably necessary to demonstrate compliance with this DPA. Such information is Segnol ERP’s confidential information and may be provided by way of written responses, security documentation or third-party reports where available.
13. Aggregated and de-identified information
Segnol ERP may use aggregated and appropriately de-identified information for analytics, security, benchmarking, product development and service improvement. Segnol ERP does not use Customer Data to train general-purpose artificial intelligence or machine-learning models.
14. Liability and precedence
Each party’s liability under this DPA is subject to the limitations and exclusions set out in the Terms & Conditions.
This DPA forms part of the Terms & Conditions. Where this DPA and the Terms & Conditions or the Privacy Policy differ on the processing of personal data by Segnol ERP as a Data Processor, this DPA prevails. In all other respects the Terms & Conditions prevail. Where a Customer has executed a separately negotiated data processing agreement, that agreement prevails over this one.
15. Changes to this DPA
Segnol ERP may update this DPA to reflect changes to the Services, applicable law, regulatory requirements or security practices. The effective date at the top of this page will be updated when it does.
16. Contact
For questions about this DPA, or to request a countersigned copy, contact hello@segnolerp.com.