Privacy Policy

We may collect information that you voluntarily provide to us when you:

• Request appointments or medical services
• Complete forms on our Site
• Make donations or payments
• Subscribe to newsletters or updates
• Contact us through email or online channels
• Participate in surveys or outreach programs

The information collected may include:

• Name and contact details
• Email address and phone number
• Billing or payment information
• Medical or health-related information necessary for care
• Demographic information
• Communication records and feedback submissions

Certain information may be considered sensitive personal data and will only be collected where necessary to provide healthcare, process requests, or improve our services.

When you use our Site, certain technical and usage information may be collected automatically, including:

• IP address
• Browser and device information
• Operating system
• Pages visited and browsing activity
• Date and time of access
• Cookies and similar tracking technologies

This information helps us improve website functionality, user experience, security, and service delivery.

Our Site may use cookies, pixels, and related technologies to enhance performance and personalize user experience. Cookies may help us:

• Understand how visitors use the Site
• Improve website functionality
• Remember user preferences
• Analyze traffic and engagement

You may disable cookies through your browser settings, though some features of the Site may not function properly.

If you subscribe to newsletters or updates, you may receive emails regarding healthcare information, hospital updates, campaigns, or community initiatives. You may unsubscribe from these communications at any time through the unsubscribe link provided in the email.

Please note that standard email communication may not always be fully secure. Sensitive medical information should not be shared through unsecured email channels unless specifically instructed.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal, regulatory, tax, accounting, and reporting obligations under Nigerian law (including the NDPR) and applicable international regulations (including the GDPR for donors in the European Economic Area).

Our standard retention periods are:

• Donation records and tax receipts: 7 years from the date of the donation, in line with Nigerian tax and audit requirements.
• Donor account profile (name, email, phone, address, consent flags): retained while the account is active and for 2 years after the last interaction, then anonymised.
• Recurring giving payment authorisations: retained while the recurring schedule is active; deleted within 90 days of cancellation.
• Marketing communication preferences: retained while opt-in is active; opt-out records are kept for 3 years to prove consent withdrawal.
• Site analytics and cookie data: aggregated after 14 months; raw identifiers deleted within 26 months.
• Support correspondence and feedback: 3 years from the last contact.
• Patient health information: governed by the separate Hospital Privacy Notice and applicable medical record retention laws.

When the retention period expires, we either securely delete the information or anonymise it so that it can no longer be linked to you. Backups containing personal data are overwritten on a 90 day rolling cycle.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Receive a portable copy of your data in a structured, machine readable format.
• Correct inaccurate or incomplete information.
• Withdraw consent to marketing communications at any time.
• Request deletion of your personal data (the right to be forgotten), subject to legal retention obligations.
• Object to or restrict certain processing activities.
• Lodge a complaint with the Nigeria Data Protection Bureau (NDPB) or your local supervisory authority.

You can exercise the access, export, and deletion rights at any time from the Donor Portal under Account: Privacy, or by writing to privacy@nigerfoundationhospital.com. We will respond to verified requests within 30 days.

For any privacy related question, request, or complaint, contact our Data Protection Officer:

• Email: privacy@nigerfoundationhospital.com
• Post: Data Protection Officer, Niger Foundation Hospital, Enugu, Nigeria