Privacy & Cookies Policy
Last updated: May 25th, 2021
Personal Information Privacy Policy
Marigold Hospital and Critical Care Centre Limited (MHCCCL or the “Hospital”) is dedicated to protecting the confidentiality and privacy of information entrusted to us by staff, patients, customers and all stakeholders. Our Data Protection and Privacy Policy indicates that we are dedicated to and responsible for processing the information of our customers, staff and other stakeholders with absolute caution and confidentiality. This policy describes how we collect, use, store, handle and secure personal information fairly, transparently, and with confidentiality.
This privacy policy sets out our current policies and demonstrates our commitment to privacy. MHCCCL provides world class and affordable patient centered healthcare solutions through its online/digital platforms and office located 12/14 Adeniyi Street, Surulere, Lagos State, Nigeria.
Our intent is to collect only the personal information that is provided voluntarily by our patients, customers or online visitors so that we can offer information and/or services to those for specific and legitimate purposes. Please review this Privacy Notice to learn more about how we collect, use, share and protect the personal information that we obtain.
Data Protection Policy
The MHCCCL’s Information Protection Policy (IPP) applies to personal information processed by the Hospital as a data controller and as described in this policy. The policy explains what information we collect about our customers, how we use that information, who we share it with, the circumstances under which we may share it and what steps are taken to make sure it stays private and secure.
Collection and Use of Personal Information
2.1. What we collect
We obtain personal information about you if you choose to provide it —for example, to fulfill your request and to provide the requested and / or agreed services. By submitting personal information to MHCCCL, you are also acknowledging that MHCCCL may use this information in accordance with this Privacy Policy.
In general we collect and generate the following information:
- Individual personal information (e.g. name, previous names, blood group, health status, genotype, date and place of birth, etc.).
- Individual personal contact details (e.g. address, email address, landline, fax and/or mobile numbers).
- Identity information (e.g. photo ID, passport, utility bill, national ID card and/or nationality).
- User authentication login and subscription data (e.g. login credentials for online rending of our Hospital services).
- Financial information.
- Information about the ways you interact with MHCCCL (e.g. channels used, geographic information, software used and information concerning your complaints).
- Cookies and similar technologies used to remember your preferences and tailor content.
- Data or records of correspondence related to relevant exchanges of information (e.g. emails).
2.2 Why we collect it and the Legal Grounds
MHCCCL generally collects only the personal information necessary to fulfill your request and to provide the requested and/or agreed services. The applicable law allows us to process personal information, so long as we have a ground under the law to do so.
- Provide you with our healthcare services (including via online platforms).
- Verify your identity (e.g. for authentication purposes).
- Deal with your transactions or carry out instructions.
- Perform data analytics and understand your preferences and how you use the provided services.
- Keep record keeping and accountability.
- Meet compliance and legal obligations such as to comply with the extant Data regulatory framework.
- Manage our relationship with you (including any activities you agree to).
- Obtain reports of an online problem (e.g. with the MHCCCL site).
- Enforce or defend the rights of a member, staff or customer of MHCCCL.
2.3 Retention of Information
We will only retain your personal data for the duration of 20 years for the purposes set out in this policy or our contract with you; and will only be destroyed before this expiration period when you exercise your right to request deletion of personal data, or otherwise required by law.
2.4 Storage of Information
The data that we collect from you will not be transferred to, and stored at, a destination outside Nigeria. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
3.0 Automatic Collection Cookies & IP Addresses
3.1 Use of Cookies and Location Based Tools
MHCCCL and its service providers use cookies and other technologies to automatically collect certain types of information when you visit MHCCCL online platforms. Cookies may be placed on your computer or internet-enabled device whenever you visit MHCCCL online.
4.0 Your Rights
4.1 Data Subject Rights
In general if you have submitted personal information to MHCCCL, you have the following rights:
- The right to access information about you and to obtain information about how it is processed.
- The right to request that your information is corrected if it is inaccurate or incomplete.
- The right to request that your information is erased, depending on the circumstances and agreements in place.
- The right to withdraw your consent to our processing of your information.
- The right to ask us not to process your personal data for marketing purposes.
- The right to lodge a complaint with the Data Protection Regulatory Authority, for example the National Information Technology Development Authority (NITDA).
5.0 Other Relevant Information
5.1 Data Security
MHCCCL has security policies and procedures in place to protect personal information from unauthorized loss, misuse, alteration, or destruction. Access to your personal information is limited to those who have a need to know and they are required to maintain the confidentiality of such information.
5.2 Your Responsibilities
You are responsible for ensuring that the information provided to MHCCCL on your behalf is accurate and up to date, and you must inform us if anything changes as soon as possible.
5.3 Questions and Enforcement
MHCCCL is committed to protecting the online privacy of your personal information. If you have questions or comments about our administration of your personal information, please contact us at IT@marigoldhospital.ng, or visit our office.
If you are not satisfied with the response you receive, you may escalate your concern to the Data Protection Commissioner by visiting www.nitda.gov.ng or email info@nitda.gov.ng.
5.4 Children’s Privacy
Please note that our services apply to children irrespective of age. We knowingly collect personally identifiable information from Children under the age of 18, under the strict supervision and consent of the child’s parent, guardian or legal custodian.
5.5 Governing Principles of our Data Processing
We guarantee that your personal data shall be collected and processed in accordance with specific, legitimate and lawful purpose consented to by you; restricted to you and shall not be transferred to any person or entity except as required by law; adequate, accurate and without prejudice to the dignity of human person; stored only for the period within which it is reasonably needed; and secured against all foreseeable hazards or breaches.