Privacy Policy

1. What Data We Collect

MedPlus collects the following categories of personal data to operate the platform:

• Identity data: Full name, email address, and phone number.
• Location data: Your address or geolocation to help find nearby practitioners and facilities.
• Health-related booking information: Appointment notes, reasons for visit, and any health details you voluntarily provide when making a booking.
• Professional verification data: MDCN registration numbers (for practitioners) and facility licence numbers (for facilities), uploaded identification documents, and verification status.
• Technical data: IP address, browser type, device information, and cookies.

2. How We Use Your Data

We use the data we collect for the following purposes:

• To facilitate bookings between patients and practitioners or facilities.
• To verify practitioners’ MDCN registrations and facilities’ operating licences.
• To improve the platform, diagnose issues, and develop new features.
• To communicate with you about your account, appointments, and platform updates.
• To comply with legal obligations and enforce our terms.

3. Data Sharing and Selling

We never sell your personal data to third parties. We only share data with:

• Practitioners and facilities you choose to book with, limited to what is necessary for the appointment.
• Service providers who help us run the platform (e.g., hosting, email delivery, payment processing), under strict confidentiality agreements.
• Regulatory authorities when required by law.

4. Health Data Security

Health-related data is stored securely on our backend infrastructure with encryption at rest and in transit. Access is restricted to authorised personnel and governed by role-based access controls. We treat all health information with the highest level of confidentiality.

5. Your Rights and Data Deletion

You have the right to access, correct, and request deletion of your personal data. To request deletion of your account and associated data, please email us at privacy@medplus.ng. We will process verifiable requests within 30 days.

6. Cookie Usage

MedPlus uses cookies and similar technologies to maintain your session, remember preferences, and analyse platform usage. By using the platform, you consent to our use of cookies. You can disable cookies in your browser settings, though some features may not function correctly.

7. Payment Data

All payment processing is handled by Paystack. MedPlus does not store or process your card details, bank account numbers, or other financial information. Paystack’s privacy policy governs the handling of your payment data.

8. Governing Law

This Privacy Policy is governed by the Nigerian Data Protection Act 2023. Any disputes arising from data handling practices shall be resolved in accordance with Nigerian law.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at privacy@medplus.ng.