MyInvite operates with strict adherence to both the European Union's GDPR and the Federal Republic of Nigeria's NDPR. We believe that privacy is a fundamental human right.
Data Portability
You have the right to request a complete export of all data associated with your account at any time in a structured format.
Right to Erasure
Under "Right to be Forgotten" mandates, you can request permanent deletion of your data unless legally hindered.
1. Your Rights Under GDPR and NDPR
As a user of the MyInvite platform, you are guaranteed specific rights over your personal data:
2. Lawful Basis of Processing & Cross-Border Transfers
Under Article 6 of the GDPR and Section 2.2 of the NDPR, MyInvite processes your personal data lawfully, fairly, and transparently, primarily based on the fulfillment of contractual obligations, legal compliance (KYC and AML requirements), and your explicit consent.
Because MyInvite leverages global infrastructure (like DigitalOcean and Paystack), data may be transferred across borders. All transfers are backed by appropriate safeguards, including Standard Contractual Clauses (SCCs) and adherence to NDPC whitelists.
3. Data Breach Protocol
MyInvite has a strict 72-hour breach notification policy. In the unlikely event of a data breach that poses a severe risk to your rights, we will notify both you and the relevant supervisory authority (such as the NDPC) within 72 hours.
4. Contacting the Data Protection Officer
MyInvite has appointed a dedicated Data Protection Officer (DPO) to oversee compliance strategy. You can reach out directly with requests or concerns.
Exercise Your Rights
To submit a Data Subject Access Request (DSAR) or speak to our DPO, please email: legal.privacy@myinvite.ng