Privacy Policy

Last Updated: February 18, 2026

MediSeen Health Systems Limited ("MediSeen," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our hospital management system ("Service").

1. Information We Collect

Account Information: When you register, we collect your name, email address, phone number, and hospital details.

Patient Health Information (PHI): Our Service processes patient data including names, contact details, medical records, diagnoses, prescriptions, lab results, and billing information. This data is entered by authorized hospital staff.

Usage Data: We collect information about how you interact with our Service, including login times, features used, and device information.

Payment Information: Payment processing is handled by Paystack. We do not store complete payment card details.

2. How We Use Your Information

To provide and maintain our Service
To process transactions and send billing notifications
To provide customer support
To send important updates about the Service
To improve our Service based on usage patterns
To comply with legal obligations

3. Data Storage and Security

Your data is stored securely using industry-standard encryption:

All data transmitted to our servers uses TLS 1.3 encryption
Patient health information is encrypted at rest using AES-256
Offline data stored locally uses AES-256-GCM encryption
We maintain comprehensive audit logs of all data access
Regular security assessments and penetration testing

4. Data Sharing

We do not sell, trade, or rent your personal information. We may share data with:

Service Providers: Third parties who assist in operating our Service (hosting, payment processing)
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with any merger or acquisition

We will never share Patient Health Information with third parties for marketing purposes.

5. NDPR Compliance

We comply with the Nigeria Data Protection Regulation (NDPR) 2019 and the Nigeria Data Protection Act (NDPA) 2023:

We process data lawfully, fairly, and transparently
We collect data for specified, explicit, and legitimate purposes
We implement appropriate technical and organizational security measures
Data subjects can exercise their rights to access, rectify, or delete their data

6. Your Rights

Under NDPR/NDPA, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to data processing
Data portability
Withdraw consent at any time

7. Data Retention

We retain patient health records for a minimum of 7 years as required by Nigerian healthcare regulations. Account data is retained for the duration of your subscription plus 2 years. You may request earlier deletion subject to legal retention requirements.

8. Cookies

We use essential cookies for authentication and session management. Analytics cookies are only used with your consent.

9. Children's Privacy

Our Service is not directed to children under 18. Patient records of minors are managed by authorized healthcare providers and guardians.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice in the Service.

11. Contact Us

For privacy-related inquiries:

Email: [email protected]
WhatsApp: +234 816 516 0797

MediSeen Health Systems Limited
Port Harcourt, Rivers State, Nigeria