NDPR Compliance

Our commitment

Equity Healthcare Group is committed to handling personal data on Sabidoktor in line with the Nigeria Data Protection Act and the Nigeria Data Protection Regulation (NDPR) principles. This page describes the practices we apply; it is a statement of our own commitments rather than a certificate or audit result.

Principles we apply

• Lawfulness, fairness and transparency in how data is collected and used.
• Purpose limitation: data is used for the healthcare purposes it was collected for.
• Data minimisation: we ask only for what a consultation, enrolment or application requires.
• Accuracy: users can update their profile details at any time.
• Storage limitation: records are kept only as long as clinical and legal obligations require.
• Integrity and confidentiality: access is restricted to the account owner and the parties to a consultation.
• Accountability: we document our handling practices and review them as the service grows.

Lawful basis for health data

Health information is sensitive personal data. We process it on the basis of your consent when you book or attend a consultation, for the performance of the service you requested, and where necessary for the provision of healthcare by a licensed professional.

Data subject rights

• Right to be informed about how your data is used.
• Right of access to the personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure of data we are not required to retain.
• Right to object to or restrict certain processing.
• Right to data portability where technically feasible.
• Right to withdraw consent at any time, without affecting prior lawful processing.

Making a request

Send your request through our contact page, marked for the attention of the data protection team, and include enough detail for us to verify your identity. We aim to respond within 30 days and will tell you if we need longer.

Cross-border transfers

Where data is processed outside Nigeria by the providers who host and operate the platform, we require appropriate safeguards and contractual protections consistent with NDPR requirements.

Security measures

Accounts are protected by authentication, and records are scoped so users can reach only their own data or consultations they are part of. Provider licence documents and CVs are stored in private storage that is not publicly accessible.

Breach handling

If a personal data breach occurs that is likely to affect your rights, we will investigate, take remedial action and notify affected users and the relevant regulator within the timelines the law requires.

Complaints

If you are unsatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission. We would appreciate the chance to resolve it with you first.