Privacy Policy

1. Introduction

VitalPulse Hospital ("we," "our," or "the Hospital") is committed to protecting the privacy and confidentiality of your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Nigerian Data Protection Regulation (NDPR) and other applicable laws.

2. Information We Collect

We collect various types of information to provide you with quality healthcare services:

• Personal Information: Name, date of birth, gender, address, phone number, email address, and national identification numbers.
• Medical Information: Medical history, diagnoses, treatment plans, medications, test results, allergies, and other health-related data.
• Insurance Information: Health insurance details, policy numbers, and coverage information.
• Financial Information: Payment details, billing addresses, and transaction history.
• Emergency Contacts: Names and contact information of your designated emergency contacts.

3. How We Use Your Information

Your information is used for the following purposes:

• Providing medical treatment, diagnosis, and healthcare services
• Coordinating care with other healthcare providers when necessary
• Processing payments and billing for services rendered
• Complying with legal and regulatory requirements
• Improving our services and conducting quality assurance
• Communicating with you about appointments, test results, and health information
• Conducting medical research with your explicit consent

4. Information Sharing and Disclosure

We respect your privacy and will not sell or rent your personal information. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share your information
• Healthcare Providers: With doctors, specialists, laboratories, and other healthcare professionals involved in your care
• Legal Requirements: When required by law, court order, or regulatory authorities
• Emergency Situations: To protect your vital interests or those of others in emergency situations
• Insurance Companies: For processing claims and verifying coverage
• Business Associates: With third-party service providers who assist us in operations, under strict confidentiality agreements

5. Data Security

We implement comprehensive security measures to protect your information:

• Physical security controls including restricted access to medical records
• Electronic security measures including encryption and firewalls
• Administrative controls including staff training and confidentiality agreements
• Regular security audits and updates to our systems
• Secure disposal procedures for outdated records

6. Your Rights

Under Nigerian law, you have the following rights regarding your personal information:

• Right to Access: Request copies of your medical records and personal information
• Right to Correction: Request corrections to inaccurate or incomplete information
• Right to Restrict Processing: Request limitations on how we use your information
• Right to Object: Object to certain uses of your information
• Right to Data Portability: Request transfer of your medical records to another provider
• Right to Withdraw Consent: Withdraw previously given consent (where applicable)

7. Medical Records Retention

We retain medical records in accordance with Nigerian healthcare regulations and professional standards. Adult medical records are typically retained for a minimum of 7 years from the last treatment date, while pediatric records are maintained until the patient reaches age 21 or longer as required by law.

8. Children's Privacy

We are committed to protecting the privacy of children. For patients under 18 years of age, parental or legal guardian consent is required for treatment and information sharing, except in emergency situations or as otherwise permitted by law.

9. Website and Online Services

Our website may use cookies and similar technologies to improve user experience. We collect minimal data through our website and maintain the same privacy standards for online interactions as we do for in-person services.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the revision date. Material changes will be communicated to patients through appropriate channels.

11. Contact Information

If you have questions, concerns, or wish to exercise your privacy rights, please contact our Data Protection Officer:

• VitalPulse Hospital
• Data Protection Officer
• Enugu, Nigeria
• Email: privacy@vitalpulsehospital.com
• Phone: +234 (0) 800 VITALPULSE

12. Complaints

If you believe your privacy rights have been violated, you have the right to file a complaint with:

• Our hospital administration at complaints@vitalpulsehospital.com
• The Nigeria Data Protection Bureau (NDPB)
• The Medical and Dental Council of Nigeria (MDCN)