Privacy
Policy.

1. Introduction & Commitment

Health-Hub Africa (“Health-Hub”, “we”, “our”, or “us”) is dedicated to protecting the confidentiality, integrity, and security of your personal health information. This Privacy Policy outlines our procedures regarding the collection, handling, storage, and sharing of personal identification and clinical data when you utilize our connected care services, including DispatchCare™, MinuteCare™, CareTest™, TeleCare™, TravelSafe™, MyHealth Vault+™ and HealthConsult™.

2. Regulatory Scope & Legal Basis

Our data governance framework adheres strictly to the Nigeria Data Protection Act (NDPA), regulations administered by the Nigeria Data Protection Commission (NDPC), national health record laws, and international medical confidentiality standards. We process your data based on:

• Medical Diagnosis & Healthcare Provision: Necessary for clinical triage, emergency response, diagnosis, treatment, and continuous care.
• Vital Interests: When immediate intervention is imperative to protect patient life in urgent medical emergencies through DispatchCare.
• Explicit Patient Consent: Provided when enrolling in services, synchronizing digital records with MyHealth Vault+, or scheduling TeleCare consultations.
• Legal & Regulatory Compliance: Fulfilling mandatory epidemiological and statutory health reporting obligations.

3. Information We Collect

In order to provide responsive, accurate, and safe medical care, we collect the following categories of information:

• Personal Identification Data: Full name, date of birth, biological sex, contact address, national identifier where applicable, phone number, and emergency contact details.
• Clinical & Health Records: Medical history, allergies, existing chronic conditions, current prescriptions, vital signs, immunization history, and clinical consultation notes.
• Emergency Dispatch Data: Incident location geolocation data, on-scene stabilization reports, triage classification, and dispatch timestamps.
• Diagnostic & Laboratory Data: Blood and biological assay results, pathology reports, and screening records conducted via CareTest™.
• Telehealth Audio & Video Metadata: Virtual consultation timestamps, encrypted clinician-patient session records, and electronic prescription logs.
• Insurance & Billing Data: Health Maintenance Organization (HMO) policy details, policyholder identification, payment confirmations, and corporate coverage memberships.

4. How Health Data is Utilized

Health information collected through our services is exclusively utilized for legitimate healthcare and operational purposes:

• Deploying Emergency Medical Dispatch Response Units (EMDRU) and ensuring rapid traffic-bypassing medical response.
• Providing 24/7 physician consultations and clinical guidance via TeleCare™.
• Managing continuous, patient-controlled longitudinal health profiles through MyHealth Vault+™.
• Conducting accurate medical diagnostics, laboratory screenings, and personalized health recommendations.
• Coordinating onward clinical transfer and receiving hospital handovers during critical emergencies.
• Processing authorized HMO claims and corporate wellness plan coverage.

5. Confidentiality, Security & Encryption

Health-Hub Africa implements state-of-the-art administrative, technical, and physical security measures to safeguard patient records against unauthorized access, loss, or manipulation:

• End-to-End Encryption: All health data in transit is encrypted using TLS 1.3, and electronic health databases are encrypted at rest using AES-256 standards.
• Role-Based Access Control: Access to medical histories is restricted strictly to licensed medical practitioners, attending clinicians, and authorized triage coordinators with legitimate clinical need.
• Audit Logging: Every access request, record view, and modification within MyHealth Vault+ is immutably logged with user and timestamp data.
• Zero Commercial Monetization: We do not sell, rent, or lease patient health data, personal details, or clinical records to third-party advertisers or data brokers under any circumstances.

6. Third-Party Disclosures & Referrals

Information is shared only under strict medical necessity and authorized conditions:

• Emergency Receiving Hospitals: When a patient stabilized by DispatchCare requires onward inpatient transfer, critical triage notes and vital metrics are securely transmitted to the receiving hospital clinical staff.
• Accredited Diagnostic Laboratories: Diagnostic samples handled under CareTest are processed by certified laboratory partners under binding confidentiality agreements.
• HMO & Insurance Providers: Verification details and treatment billing summaries are shared with your designated HMO (e.g., AXA Mansard, Leadway Health, Hygeia) solely to confirm benefits coverage.

7. Patient Rights & Data Control

Under the NDPA and healthcare governance standards, you possess the right to:

• Access your complete longitudinal medical profile anytime via MyHealth Vault+ ↗.
• Request rectification or amendment of inaccurate personal details.
• Export your health records in standardized digital format for portability to another medical institution.
• Withdraw consent for optional non-essential communications or wellness screenings.

8. Data Protection Officer (DPO) Contact

For questions regarding our privacy framework, data access requests, or regulatory inquiries, contact our Data Protection Officer:

Email: privacy@healthubafrica.com
Clinical Operations Office: 16 Idowu Martins Street, Victoria Island, Lagos, Nigeria.
Telephone: 0700-225-5482