Privacy Policy

Personal Information

When you register on our platform, we collect personal details including your full name, email address, phone number, date of birth, residential address, medical license number, specialty, and professional credentials. For patients seeking second opinions, we may also collect next-of-kin information and emergency contact details.

Medical Records and Health Data

In connection with our second opinion services, we may collect and process medical records, diagnostic reports, imaging results, laboratory findings, treatment histories, and other health-related information provided by users or their referring physicians. All medical data is handled with the highest level of confidentiality in accordance with applicable healthcare regulations.

Payment Data

We collect payment information necessary to process membership dues, second opinion service fees, and other transactions. Payment processing is handled securely through Paystack, our third-party payment processor. We do not store full credit or debit card numbers on our servers.

Technical and Usage Data

We automatically collect information about your device, browser type, IP address, pages visited, time spent on the platform, and other usage analytics to improve our services and user experience.

We use the information we collect for the following purposes:

Account Management: To create, maintain, and secure your account on the DFC platform, verify your medical credentials, and manage your membership status.

Service Delivery: To facilitate second opinion consultations, connect patients with specialist physicians, schedule appointments, and deliver telemedicine services through our platform.

Communications: To send appointment reminders, membership renewal notices, newsletters, platform updates, and other relevant communications related to your use of our services.

Payment Processing: To process membership dues, consultation fees, and other financial transactions securely through our payment infrastructure.

Platform Improvement: To analyze usage patterns, diagnose technical issues, and enhance the functionality, security, and overall user experience of our platform.

Legal Compliance: To comply with applicable laws, regulations, and legal obligations, including those specific to healthcare data handling in Nigeria and other jurisdictions where our members practice.

We do not sell your personal information to third parties. We may share your data in the following limited circumstances:

With Consulting Physicians: Medical records and relevant health information are shared with DFC-affiliated specialists solely for the purpose of providing second opinion consultations requested by users.

Service Providers: We engage trusted third-party service providers (such as Paystack for payments, cloud hosting providers, and email service providers) who process data on our behalf under strict confidentiality agreements.

Legal Requirements: We may disclose information when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect the rights, safety, or property of DFC, our users, or the public.

Professional Regulatory Bodies: We may share physician credential information with relevant medical regulatory authorities for verification and compliance purposes.

We implement robust technical and organizational measures to protect your personal and medical information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure access controls, regular security audits, and staff training on data protection protocols. While we strive to protect your information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Under the Nigeria Data Protection Regulation (NDPR)

As a data subject under the NDPR and other applicable data protection laws, you have the following rights:

Right of Access: You may request a copy of the personal data we hold about you.

Right to Rectification: You may request correction of any inaccurate or incomplete personal data.

Right to Erasure: You may request deletion of your personal data, subject to our legal and regulatory obligations to retain certain records.

Right to Restriction: You may request that we limit the processing of your personal data under certain circumstances.

Right to Data Portability: You may request to receive your personal data in a structured, commonly used format.

Right to Object: You may object to the processing of your personal data for direct marketing purposes or other grounds related to your particular situation.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided below. We will respond to your request within 30 days.

Our platform uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and gather analytical data. Cookies are small text files stored on your device when you visit our platform.

Essential Cookies: Required for the platform to function properly, including authentication, security, and session management.

Analytics Cookies: Help us understand how users interact with our platform so we can improve its performance and usability.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our platform.

We retain your personal information for as long as your account is active or as needed to provide you with our services. Medical records and consultation data may be retained for longer periods as required by applicable healthcare regulations and professional standards. Upon account deletion, we will securely erase your personal data except where retention is required by law.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our platform and, where appropriate, by email. Your continued use of the platform after such changes constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Doctors Foundation for Care (DFC) Email: privacy@doctorsfoundationforcare.org Address: Lagos, Nigeria