This DPA forms part of our Terms of Service for customers acting as Data Controller. By signing up you accept this DPA. If your organisation needs a signed copy, request one from legal@izzimanager.com.
1. Roles
You are the Data Controller for personal data you upload (customer, supplier and employee records). Izzikart Limited is the Data Processor, acting on your instructions as set out in our Terms.
2. Processing details
- Subject matter: providing the Izzi Manager service.
- Duration: for the term of your subscription plus 30 days after cancellation.
- Nature: storage, retrieval, transmission and deletion of personal data.
- Data subjects: your customers, suppliers, employees and contacts.
- Categories: identifiers (name, email, phone) and business records (invoices, payments, payroll).
3. Subprocessors
We use the subprocessors listed in our Privacy Policy. We will tell you 30 days before adding a new subprocessor; you may terminate if you object.
4. Security measures
- Encryption at rest (AES 256 GCM) for personal data.
- Encryption in transit (TLS 1.2 or later).
- Role based access control and strict separation between customers.
- Audit logging of every access to personal data.
- Daily backups kept for 30 days.
- Two step login required for privileged roles.
- Regular penetration testing.
5. Data subject rights
If a data subject contacts you with an access, correction or deletion request, we will help you meet it within the time limits set by Ghana's Data Protection Act.
6. Data breaches
We will tell you about any confirmed personal data breach affecting your data within 72 hours, with details of what happened, the data involved and the steps we are taking.
7. Audits
Enterprise customers may audit our practices once a year with 30 days' notice. We provide SOC style reports on request.
8. Return and deletion
On termination, you have 30 days to export all data. After that we permanently delete it from our production systems within 7 days, and from backups within 90 days.
9. Transfers outside Ghana
Our infrastructure is hosted in the EU (eu-central-1). If you need hosting in Ghana only, contact sales. It is available on the Enterprise plan.