Lavamozu Health — care, connect, empower
Emergency

Platform Maintenance and Availability Policy

Effective 15 September 2026. This policy explains service availability, maintenance and support arrangements for LAVAMOZU HEALTH, operated by LAVAMOZU CONSULT (RC 9808460).

Legal entity
LAVAMOZU CONSULT
Registration
RC 9808460
Trading name
LAVAMOZU HEALTH
Contact
health@lavamozu.com.ng

1. Availability

The parties may establish an agreed availability target separately. Availability commitments shall take into account circumstances outside the Service Provider's reasonable control, including third-party service interruptions, internet failures, force majeure events and scheduled maintenance.

2. Data Ownership

All user, client, healthcare, transaction and business data belonging to LAVAMOZU HEALTH or its users shall remain the property of the appropriate data owner. The Service Provider shall not acquire ownership of such data merely by storing, processing or maintaining it on behalf of LAVAMOZU HEALTH.

3. Data Protection

The Service Provider shall process personal data only as authorised by LAVAMOZU HEALTH and in accordance with applicable Nigerian data-protection requirements and the parties' written instructions. Where the Service Provider processes personal data on behalf of LAVAMOZU HEALTH, the parties shall enter into an appropriate Data Processing Agreement (DPA) or equivalent contractual provisions where required.

4. Health Information

Because the Platform may involve healthcare-related information, the Service Provider shall apply appropriate safeguards to information relating to patients, clients and healthcare services. The Service Provider shall not: Access health information unnecessarily Use health information for unrelated purposes Disclose health information without lawful authorisation Use production patient information for testing or development where reasonably avoidable Access shall be limited to authorised personnel who have a legitimate technical need to access the information.

5. Confidentiality

The Service Provider shall keep confidential all non-public information obtained through its relationship with LAVAMOZU HEALTH, which may include: Business information User information Healthcare information Financial information Proprietary software Internal documentation Security information Development information Other information reasonably understood to be confidential This obligation shall survive termination of this Agreement.

6. Security

The Service Provider shall maintain reasonable technical and organisational measures appropriate to the nature of the Platform and information processed. The Service Provider shall take reasonable steps to prevent unauthorised access, alteration, disclosure, destruction or loss of Platform data. Security-sensitive information shall not be included in this Agreement. This includes passwords, private keys, access tokens, API secrets, authentication credentials and similar information.

7. Security Incidents

The Service Provider shall promptly notify LAVAMOZU HEALTH upon becoming aware of a security incident that materially affects the Platform or personal data processed on behalf of LAVAMOZU HEALTH. The parties shall cooperate in investigating, containing, documenting and responding to the incident. Specific notification timelines may be established in the DPA or confidential security schedule.

8. Access Control

Access to Platform systems shall be restricted to authorised personnel based on legitimate business or technical requirements. Where appropriate, access shall be removed when personnel no longer require it. The Service Provider shall not share LAVAMOZU HEALTH access credentials with unauthorised persons.

9. Backups and Recovery

Where backup and recovery services form part of the Service Provider's responsibilities, reasonable procedures shall be maintained for protecting and restoring relevant Platform data. Specific backup frequency, recovery objectives and retention periods may be agreed separately.

10. Change Management

Material changes to the Platform should be authorised by LAVAMOZU HEALTH before implementation. Emergency changes may be implemented where necessary to protect the Platform or restore essential services, provided LAVAMOZU HEALTH is informed as soon as reasonably practicable.

11. Development and Testing

New functionality shall be developed and tested using reasonable development practices. Where reasonably practicable, production healthcare information shall not be copied into development or testing environments.

12. Third-Party Services

The Platform may depend upon third-party services or technologies. The Service Provider shall not introduce a material third-party service that creates significant additional data-protection, security or operational risk without appropriate authorisation. Third-party services remain subject to their applicable terms and limitations.

13. Artificial Intelligence and Automated Technologies

The Service Provider shall not submit confidential LAVAMOZU HEALTH information or identifiable patient information to external artificial-intelligence systems or automated services without appropriate authorisation and safeguards. Where AI or automated technologies are proposed for development, monitoring, support or processing, their use shall be subject to applicable contractual, privacy and security requirements.

14. Intellectual Property

Unless otherwise agreed in writing: LAVAMOZU HEALTH retains ownership of its trademarks, branding, business information, content and data Ownership of custom software and development work shall be determined by the applicable development agreement or written arrangement between the parties Pre-existing tools, frameworks, libraries and technologies owned by the Service Provider remain subject to their existing ownership rights Open-source software remains subject to its applicable licence

15. Domain and Platform Control

LAVAMOZU HEALTH retains appropriate ownership and administrative control over its business-critical digital assets. Nothing in this Agreement grants the Service Provider ownership of LAVAMOZU HEALTH's brand, domain name, business accounts or user data merely because the Service Provider administers or maintains them. Specific technical access arrangements shall be handled separately and securely.

16. Subcontractors

The Service Provider shall remain responsible for the acts and omissions of approved subcontractors engaged to perform services under this Agreement, subject to applicable law. Where a subcontractor will process personal or healthcare information, appropriate contractual safeguards shall be established.

17. Fees

LAVAMOZU HEALTH shall pay the Service Provider the agreed maintenance and service fees. Monthly/Annual Fee: [●] Payment Terms: [●] Additional development work shall require prior agreement on scope and fees unless otherwise provided.

18. Client Responsibilities

LAVAMOZU HEALTH shall: Provide reasonable information necessary for maintenance Identify authorised persons who may approve changes Pay agreed fees Promptly report known technical problems where practicable Cooperate reasonably with incident investigation and recovery

19. Service Provider Responsibilities

The Service Provider shall: Perform services professionally and with reasonable care Maintain appropriate security practices Protect confidential information Comply with agreed instructions Promptly communicate material technical problems Avoid unauthorised use or disclosure of Platform information

20. Warranties

The Service Provider warrants that services shall be performed with reasonable skill and care. Except as expressly stated, no guarantee is made that the Platform will operate without interruption or that every defect will be immediately identified or resolved.

LAVAMOZU CONSULT (RC 9808460) · No. 4 Chief Nnadi Street, opposite International Market, Orlu, Imo State, Nigeria · +234 915 880 9335