Legal

Privacy policy

Last updated 23 September 2026

This policy explains what personal information ClinicOS collects, why, and what you can do about it. It covers this website and how we handle information when clinics use the ClinicOS platform.

1. This website

This website does not use advertising trackers or sign-up forms. The walkthrough uses fictional examples. It does not use your microphone, place calls, send USSD requests or collect health information, and it resets when you reload the page.

Like any website, our hosting provider receives basic technical information when you visit, such as your IP address, browser type and the pages you request. This is used to deliver and secure the site.

Analytics

We use Google Analytics to understand how people use the website, such as which pages are visited, how long visits last, and roughly where visitors are. Google Analytics uses cookies and processes this information on our behalf. It does not receive anything you type into the contact form, and we do not use it for advertising.

Google may process this data outside Nigeria. You can block analytics cookies in your browser settings or install the Google Analytics opt-out add-on. See how Google uses information from sites that use its services.

2. When you contact us

If you email us or use the contact page, we receive your name, email address, organisation and whatever you write. We use this only to reply, to follow up on your enquiry, and to keep a record of our conversation. We do not sell it or use it for advertising.

Please do not send us patient health information by email or through the contact page.

3. Patient data in the platform

When a clinic, hospital or health programme uses ClinicOS, that organisation decides what patient information is collected and why. Under the Nigeria Data Protection Act 2023, the organisation is the data controller and ClinicOS acts as its data processor.

We process patient data only on the organisation's instructions and under a written data processing agreement. That agreement sets out the purpose, security measures, retention periods and where data is stored. Patients should contact their clinic first with questions about their records. We will help the clinic respond.

We do not use patient data to train AI models unless the organisation agrees in writing. See AI and compliance for more on how AI features handle data.

We share personal information only with service providers who help us run ClinicOS, such as hosting, analytics, email and speech-processing providers, under contracts that require them to protect it. We may also disclose information where the law requires it.

If information is transferred outside Nigeria, we do so only where the Nigeria Data Protection Act 2023 allows it and with appropriate safeguards in place.

5. Security and retention

We use technical and organisational measures to protect personal information, including access controls, encryption and access logging. No system is perfectly secure. If a breach affects your information, we will notify the affected organisation and the Nigeria Data Protection Commission as the law requires.

We keep enquiry emails for as long as needed to deal with them and maintain our records. Patient data is kept for the period set in each organisation's agreement, then deleted or returned.

6. Your rights

You can ask to access, correct or delete your personal information, object to or restrict how we use it, or withdraw consent where we rely on it. Email [email protected] and we will respond within the time the law allows. You can also complain to the Nigeria Data Protection Commission.

Changes to this policy

We will update this page when our practices change and revise the date at the top. Significant changes affecting clinics will also be communicated directly.