Privacy Policy

INTRODUCTION

First Cardiology Consultants ("we", "us", "our", or the "Practice") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://www.firstcardiology.org/ or otherwise interact with us in connection with the Website.

We process personal data in accordance with the Nigeria Data Protection Act 2023 (the “NDPA”), the Nigeria Data Protection Regulation, and other applicable laws. Where we serve patients or visitors located in other jurisdictions, additional data protection laws may also apply.

SCOPE OF THIS POLICY

This Policy applies to personal data collected through the Website, including appointment request forms, contact forms, newsletter sign-ups, and automated technologies such as cookies. It does not cover the clinical records we maintain in the course of providing healthcare services, which are governed by separate patient confidentiality obligations and applicable medical records laws.

INFORMATION WE COLLECT

3:1 Information you provide

• Identity and contact details such as your name, date of birth, email address, telephone number, and postal address;
• Appointment information, including your preferred clinician, preferred dates, and the reason for your enquiry;
• Any health-related information you choose to include in a message or form. Health data is a special category of personal data and we ask that you share only what is necessary;
• Correspondence and feedback you send to us through the Website.

3:2 Information we collect automatically

• Technical data such as your IP address, browser type, device information, and operating system;
• Usage data such as the pages you visit, the time and date of your visit, and how you navigate the Website;
• Cookies and similar technologies, as described in Section 8.

HOW WE COLLECT INFORMATION

We collect information directly from you when you complete forms or contact us, automatically through cookies and analytics tools as you use the Website, and, in limited cases, from third parties such as referring physicians or service providers acting on our behalf.

HOW WE COLLECT INFORMATION

5:1 Information we collect automatically

• To respond to your enquiries and to process and confirm appointment requests;
• To provide, operate, maintain, and improve the Website and our services;
• To communicate with you about your appointments, our services, and administrative matters;
• To send you newsletters or updates where you have consented to receive them;
• To maintain the security and integrity of the Website and to prevent fraud or misuse;
• To comply with our legal, regulatory, and professional obligations.

LAWFUL BASIS FOR PROCESSING

Under the NDPA, we rely on one or more of the following lawful bases when processing your personal data:

Consent

Where you have given clear consent — for example, to receive marketing communications or to submit health information through the Website.

Contract

Where you have given clear consent — for example, to receive marketing communications or to submit health information through the Website.

Legal Obligation

Where we must process data to comply with the law.

Legitimate Interests

Where processing is necessary for our legitimate interests — such as securing and improving the Website — provided these do not override your rights.

Vital Interests

Where processing is necessary to protect someone's life or health.

SHARING AND DISCLOSURE OF INFORMATION

We do not sell your personal data. We may share your information only with:

• Our clinicians and authorised staff, strictly on a need-to-know basis to respond to your request
• To provide, operate, maintain, and improve the Website and our services;
• Trusted service providers (such as IT, hosting, scheduling, and communications providers) who process data on our behalf under written agreements
• Professional advisers, regulators, or authorities where required by law or to protect our legal rights
• A successor entity in the event of a merger, reorganisation, or transfer of the Practice, subject to this Policy

COOKIES AND SIMILAR TECHNOLOGIES

The Website uses cookies and similar technologies to operate effectively, remember your preferences, and understand how the Website is used.

You can control or disable cookies through your browser settings, although some features of the Website may not function properly without them. Where required, we will request your consent before placing non-essential cookies.

DATA SECURITY

We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, loss, misuse, or alteration.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You share information with us at your own risk and should avoid sending highly sensitive details through unsecured channels.

DATA RETENTION

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements.

When data is no longer required, we will securely delete or anonymise it.

YOUR RIGHTS

Subject to applicable law, you have the following rights regarding your personal data:

Right to Acess

Request a copy of personal Data we hold about you

Right to Rectification

Request a correction of inaccurate or incomplete data.

Right to Erasure

At anytime without affecting prior Processing

Right to Object

Object to or request restriction of certain processing

Withdraw Consent

Request for Deletion of your Data in certain circumstances

Data Portability

Request your data in a portable, machine-readable format.

Lodge a Complaint

With the Nigeria Data Protection Commission or other relevant authority.

Exercise your rights

Contact us at info@firstcardiology.org — we may verify your identity first

CHILDREN’S PRIVACY

The Website is not directed at children, and we do not knowingly collect personal data from children without the consent of a parent or legal guardian.

If you believe a child has provided us with personal data without appropriate consent, please contact us so we can take appropriate action.

INTERNATIONAL DATA TRANSFER

Some of our service providers may process data outside Nigeria. Where personal data is transferred internationally, we take reasonable steps to ensure it is protected by appropriate safeguards consistent with the NDPA and applicable law.

THIRD-PARTY LINKS

The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party site you visit.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this Policy periodically.

Significant changes may be communicated to you directly where appropriate.

CONTACT US

If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your rights, please contact us: