Last updated: 05 June 2026 — We take your privacy seriously.
Information We Collect
-
Personal identification: Full name, date of birth, gender, contact details
-
Medical information: Health history, consultation notes, prescriptions, lab results
-
ANC data: Obstetric history, pregnancy details, vital signs (for female patients using ANC services)
-
Payment information: Transaction references (we do not store card details — handled by Flutterwave)
-
Technical data: IP address, device type, browser, access logs
How We Use Your Information
-
To provide virtual medical consultations and healthcare services
-
To process payments and manage subscriptions
-
To send appointment reminders and health notifications
-
To generate medical reports and consultation summaries
-
To improve our services and user experience
-
To comply with legal and regulatory healthcare obligations in Nigeria
Data Sharing
-
Your treating doctor: Full clinical access during consultations
-
Administrative staff: Limited access for appointment management only
-
Flutterwave: Payment processing (governed by their privacy policy)
-
Legal authorities: Only when required by Nigerian law or court order
-
We NEVER sell your personal or medical data to third parties
Data Security
-
256-bit SSL encryption for all data transmission
-
BCrypt password hashing with cost factor 12
-
Prepared SQL statements to prevent injection attacks
-
Role-based access control — doctors see only their patients
-
Regular security audits and vulnerability assessments
-
Automatic session timeout after 1 hour of inactivity
Data Retention
-
Active accounts: Data retained for the duration of your account
-
Consultation records: Minimum 7 years (Nigerian medical record requirements)
-
Payment records: 5 years for financial compliance
-
ANC records: Retained until child reaches 18 years of age
-
Deleted accounts: Anonymized within 30 days of deletion request
Your Rights (NDPR)
-
Right to access: Request a copy of all data we hold about you
-
Right to correction: Update inaccurate personal information
-
Right to deletion: Request removal of your account and data
-
Right to portability: Receive your data in a portable format
-
Right to object: Opt out of non-essential data processing
-
To exercise these rights, email: privacy@blossomsclinic.com
Cookies
-
Session cookies: Required for login and security (cannot be disabled)
-
Preference cookies: Remember your display settings
-
We do not use advertising or tracking cookies
-
You can clear cookies via your browser settings at any time
Contact Our Privacy Team
Data Protection Officer: privacy@blossomsclinic.com
Phone: +234 801 234 5678
Address: 12 Medical Drive, Victoria Island, Lagos, Nigeria