Privacy Policy

🏢

1. Who We Are

MyDoctor247 is operated by Western Dada Limited, a Nigerian company registered under the Companies and Allied Matters Act (CAMA), with offices in Port Harcourt (Rivers State), Lagos, and Abuja, Nigeria.

For the purposes of this Privacy Policy, "MyDoctor247," "we," "us," and "our" refer to Western Dada Limited, operating the platform accessible at www.mydoctor247.com.ng.

This Privacy Policy governs how we collect, use, disclose, and safeguard information from visitors and registered users of our website, mobile application, and related services (collectively, the "Platform").

📋

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

2.1 Information You Provide

• Account Registration: Name, email address, phone number, and password
• Patient Profile: Date of birth, gender, location, medical history (optional)
• Appointments: Symptoms, appointment notes, consultation details
• Pharmacy Orders: Delivery address, prescription details, payment information
• Doctor Listings: MDCN license, qualifications, practice address, photo
• Communications: Messages sent via contact forms, email, or WhatsApp

2.2 Automatically Collected Information

• IP address, device type, browser type, and operating system
• Pages visited, time spent, and navigation patterns on our Platform
• Search queries entered within the Platform
• Cookies and similar tracking technologies (see Section 6)

2.3 Information from Third Parties

• Payment verification data from Paystack and Flutterwave (we never store raw card numbers)
• Doctor credential verification from the Medical and Dental Council of Nigeria (MDCN)
• Social login data if you sign in using Google or Facebook

🎯

3. How We Use Your Data

We will never use your health data for advertising targeting or sell it to any third party for commercial purposes.

🔗

4. Sharing Your Information

We share your information only in the following circumstances:

• With your doctor: When you book an appointment, your name, contact, and symptom notes are shared with the specific doctor you selected
• Delivery partners: Your delivery address is shared with GIG Logistics and similar partners solely to fulfil pharmacy orders
• Payment processors: Paystack and Flutterwave receive transaction data to process payments securely
• MDCN: We share doctor applicant details for credential verification
• Law enforcement: Where required by valid Nigerian law or court order
• Business transfers: If MyDoctor247 is acquired or merged, your data may transfer to the acquiring entity under the same privacy protections

🩺

5. Medical Data & Confidentiality

We understand that health information is among the most sensitive categories of personal data. We apply the highest standard of protection to any medical data collected on our Platform.

• Medical data is encrypted at rest using AES-256 encryption
• Consultation notes are accessible only to you and the specific doctor involved
• No medical data is shared for marketing, research, or advertising without explicit written consent
• You may request deletion of all medical data at any time (subject to legal retention requirements)
• Our staff undergo mandatory data privacy training and sign confidentiality agreements

🍪

6. Cookies & Tracking

We use cookies and similar technologies to improve your experience. You can control cookie preferences via your browser settings.

🔐

7. Data Security

We implement industry-standard technical and organisational measures to protect your data, including:

• AES-256 encryption for all data at rest
• TLS 1.3 encryption for all data in transit (HTTPS)
• Two-factor authentication for all staff access to patient data
• Regular penetration testing and security audits
• Strict access controls — only staff who need your data to perform their role may access it

No system is 100% secure. If a data breach occurs, we will notify affected users within 72 hours in accordance with applicable law.

✊

8. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Ask us to correct inaccurate information
• Deletion: Request erasure of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw Consent: Withdraw any previously given consent at any time

To exercise any of these rights, email privacy@mydoctor247.com.ng. We will respond within 30 days.

🗓️

9. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Typically:

• Account data: Until account deletion + 6 months
• Medical records and consultation notes: 7 years (as required by Nigerian medical practice law)
• Payment records: 7 years (for tax and audit compliance)
• Analytics data: 26 months (anonymised after 6 months)

👦

10. Children's Privacy

MyDoctor247 is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. Parents or guardians may use our Platform to seek medical care for minor children, in which case the parent/guardian's data is used for the account.

🔗

11. Third-Party Links

Our Platform may contain links to external websites (e.g. hospital websites, government health portals). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any personal information.

🔄

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and/or a prominent notice on the Platform at least 14 days before the change takes effect. The date of the latest update is shown at the top of this page.

✉️

13. Contact Us

For privacy-related questions, requests, or complaints, please contact our Data Protection Officer:

If you are not satisfied with our response, you may file a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.