Privacy policyPrivacypolicy

1. Introduction

Medic Connect ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you access or use the Medic Connect website (medicconnect.co), our Perspective blog, or any of our healthcare staffing, home care, and support services (collectively, the "Services").

Medic Connect is registered in England and Wales (Company Number 15986218) and in Nigeria (RC 8026476), with its principal office at 145 Igbosere Road, Lagos Island, Lagos, Nigeria.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our Services.

2. Information we collect

2.1 Personal information you provide

We collect personal information that you voluntarily provide when you interact with our Services, including but not limited to:

• Identity and Contact Data: Full name, email address, telephone number, postal address, date of birth, and government-issued identification details.
• Healthcare Data: Medical history, care requirements, treatment preferences, health conditions, and clinical notes necessary for the provision of home care, antenatal, postnatal, paediatric, and eldercare services.
• Professional and Employment Data: Qualifications, professional certifications, licensure details, employment history, references, and background check results for healthcare professionals applying to join our network.
• Financial Data: Bank account details and payment information necessary for processing payments for our Services.
• Agreement Records: When you accept a care offer online, your typed name, your drawn signature, the date and time, the option you chose and your IP address and device details, kept as the record of your agreement.
• Communications Data: Records of correspondence, including emails, contact form submissions, and enquiries submitted through our website.

2.2 Information collected automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and geolocation data
• Browser type, version, and operating system
• Pages visited, time spent on pages, and navigation paths
• Referring website addresses
• Device identifiers and cookies (see Section 9 below)

3. Legal basis for processing

We process your personal information on the following legal bases, in accordance with the Nigeria Data Protection Act 2023 (NDPA) and the UK General Data Protection Regulation (UK GDPR):

• Consent: Where you have given clear, informed consent for us to process your personal data for specific purposes, such as subscribing to our newsletter or the Perspective blog.
• Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party, including the provision of healthcare staffing, home care, or clinical research services.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our Services, ensuring network security, and preventing fraud, provided such interests are not overridden by your rights and freedoms.
• Legal Obligation: Where processing is required to comply with applicable laws, regulations, or court orders, including healthcare regulatory requirements in Nigeria and the United Kingdom.
• Vital Interests: Where processing is necessary to protect the vital interests of a data subject, particularly in the context of emergency healthcare situations.

4. How we use your information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our healthcare staffing, home care, hospital support, and clinical research services
• To match healthcare professionals with clients based on care requirements, qualifications, and availability
• To verify the identity, qualifications, and professional standing of healthcare professionals joining our network
• To process applications, enquiries, and contact form submissions
• To communicate with you about your care plan, appointments, and service updates
• To send newsletters, marketing communications, and updates from Perspective (with your consent)
• To process payments and manage billing
• To comply with legal and regulatory obligations, including healthcare licensing and reporting requirements
• To improve the quality, safety, and effectiveness of our Services
• To detect, prevent, and address fraud, security breaches, and technical issues

5. Data sharing and disclosure

We may share your personal information with the following categories of recipients:

• Healthcare Professionals: We share relevant client information with healthcare professionals assigned to provide care, to the extent necessary for safe and effective service delivery.
• Partner Healthcare Facilities: We may share professional data with hospitals, clinics, and research institutions for staffing placements and clinical research coordination.
• Regulatory Bodies: We may disclose information to healthcare regulatory authorities, professional licensing bodies, and government agencies as required by law.
• Payment Processors: We share financial data with secure, PCI-compliant payment processing partners, such as Paystack, to facilitate transactions. Card details are entered with the payment processor and are not stored by us.
• Messaging: Where you agree to it in your care plan, daily care updates are shared with the people you choose through WhatsApp or another channel you prefer.
• Service Providers: We engage third-party service providers (e.g., hosting, analytics, email delivery) who process data on our behalf under strict contractual obligations of confidentiality.
• Legal Requirements: We may disclose information where required by law, regulation, legal process, or governmental request.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. International data transfers

As Medic Connect operates in both Nigeria and the United Kingdom, your personal data may be transferred between these jurisdictions. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with the NDPA and UK GDPR, including the use of standard contractual clauses, adequacy decisions, and other legally recognised transfer mechanisms.

Some of the service providers we use for hosting, email delivery and payments may store or process data outside Nigeria. We use providers that protect personal data to standards the NDPA recognises, and only to provide our Services.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. Our general retention periods are:

• Client healthcare records: Retained for a minimum of 8 years from the date of last service, or longer as required by applicable healthcare regulations.
• Professional credentials and employment data: Retained for the duration of the professional's active status in our network, plus 6 years thereafter.
• Financial and transaction records: Retained for 7 years in accordance with tax and accounting regulations.
• Marketing and newsletter data: Retained until you withdraw your consent or unsubscribe.
• Website analytics data: Retained for up to 26 months.
• Contact form submissions and enquiries: Retained for 3 years.

8. Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption of data in transit (TLS/SSL) and at rest
• Role-based access controls limiting data access to authorised personnel
• Regular security assessments and vulnerability testing
• Staff training on data protection and confidentiality obligations
• Secure data backup and disaster recovery procedures
• Incident response procedures for data breaches

While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

9. Cookies and tracking technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and to collect usage data. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the website to function properly, including authentication and security cookies.
• Analytical/Performance Cookies: Help us understand how visitors interact with our website by collecting information about pages visited and errors encountered.
• Functionality Cookies: Enable enhanced features and personalisation, such as remembering your preferences.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Your rights under the Nigeria Data Protection Act 2023

If you are located in Nigeria, you have the following rights under the NDPA:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data, subject to legal and regulatory retention requirements.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing or where we rely on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11. Your rights under UK GDPR

If you are located in the United Kingdom, you have the following rights under the UK GDPR:

• Right of access to your personal data
• Right to rectification of inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights relating to automated decision-making and profiling

To exercise any of these rights, please contact us using the details provided in Section 14 below. We will respond to your request within 30 days (or as otherwise required by applicable law). We may request verification of your identity before processing your request.

12. Children's privacy

Our website and Services are not directed at children under the age of 18. We do not knowingly collect personal information from children under 18 without parental or guardian consent. Where we provide newborn, paediatric or nanny/childcare services, all personal data relating to the child, including health information, is collected from and managed with their parents or legal guardians, and used only to provide and record their care. If you believe we have inadvertently collected personal data from a child without appropriate consent, please contact us immediately and we will take steps to delete such information.

13. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date above. We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any modifications constitutes your acceptance of the updated Privacy Policy.

14. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:

If you are not satisfied with our response to your complaint, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or the UK Information Commissioner's Office (ICO), as applicable.