Invozaa policies & compliance
The documents below govern your use of the Invozaa platform. Choose the regional section that matches the jurisdiction in which we serve you.
Federal Republic of Nigeria
You are connecting from Nigeria. The NITDA NDPR 2019 / NDPA 2027 Addendum applies in full to your data, including 72-hour breach reporting to the Nigeria Data Protection Commission.
Terms of Use
Acceptance, user obligations, payment & refund policy, disclaimers, liability caps, intellectual property, and termination.
Read Terms
Privacy Policy
Personal data categories, lawful bases, processors, retention schedule, cookies, breaches, and Data Subject rights.
Read Privacy
EU & UK GDPR Addendum
Lawful bases (Art. 6), controller & EU/UK rep (Art. 27), rights (Art. 15–22), SCC/IDTA transfers, DPO, 72h breach.
Review GDPR
US HIPAA BAA Addendum
Permitted PHI disclosures (§164.502), minimum necessary, de-identification, individual rights, Breach Notification Rule, BAA, Security Rule safeguards.
Review HIPAA BAA
NDPR 2019 & NDPA 2027 Addendum
Lawful bases, cross-border transfers & adequacy, DPIA, DPO, 72h NDPC breach notification, ROPA, civil/criminal penalty awareness.
Review NDPR / NDPA
Contact legal
For DPO enquiries, right-of-access requests, breach reports, sub-processor listings, or executed SCCs.
support@invozaa.com