Privacy Policy

Online Health Company Limited (“Ohealth”, “we”, “our”, “us”) is committed to protecting your privacy and ensuring that your personal information is handled responsibly and in accordance with applicable data protection laws, including the Nigeria Data Protection Regulation (NDPR) and other relevant privacy laws.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our mobile application (“App”), website (www.ohealthng.com), or any related products and services (collectively referred to as the “Ohealth Platform”).

By using the Ohealth Platform, you agree to the collection and use of your information in accordance with this Privacy Policy.

1. Information We Collect

We may collect and process the following categories of personal information:

a. Personal Identification Information

• Full name, date of birth, gender
• Contact information (email, phone number, address)
• Identification details (e.g., government ID, HMO ID, or profile data)

b. Health and Medical Information

• Medical history, symptoms, diagnosis, prescriptions, and treatment details shared during consultations
• Records of chats, video consultations, or uploads for medical evaluation
• Laboratory and diagnostic results provided by partner facilities

c. Technical and Usage Information

• Device data (model, operating system, browser type)
• IP address and geolocation (where applicable)
• App and website usage statistics, log files, and diagnostic data

d. Payment and Transaction Information

• Payment method and billing details
• Transaction history (via secure third-party payment processors)

e. Third-Party and Partner Data

• Data shared by medical practitioners, laboratories, pharmacies, HMOs, or insurance partners as part of service delivery

2. How We Use Your Information

We use your personal data to:

• Provide healthcare, teleconsultation, and wellness services
• Facilitate communication between patients and licensed practitioners
• Maintain accurate health and service records
• Process payments, subscriptions, and billing
• Respond to support requests, inquiries, and complaints
• Send appointment reminders, reports, and important notifications
• Comply with legal and regulatory requirements
• Improve our products, technology, and user experience
• Send you relevant updates, promotions, or offers (only with your consent)

3. Legal Basis for Processing

We process your personal information based on one or more of the following legal bases:

• Your Consent: when you voluntarily provide data or opt in for communications
• Contractual Necessity: to perform our obligations under a service agreement
• Legal Obligation: to comply with healthcare and recordkeeping regulations
• Legitimate Interests: to improve services, ensure safety, and prevent fraud

4. How We Share Your Information

We may share your information with:

• Licensed healthcare practitioners providing consultations via Ohealth
• Partner organizations (labs, pharmacies, HMOs, ambulance services, dieticians) assisting in care delivery
• Payment processors and financial institutions for billing purposes
• Regulatory authorities or law enforcement, when legally required
• Technical service providers offering hosting, analytics, or IT support under confidentiality agreements

We ensure all third-party partners comply with data protection and confidentiality obligations consistent with this Privacy Policy.

5. Data Retention

We retain personal and health data for as long as necessary to:

• Deliver the services you request,
• Comply with applicable legal and medical record obligations, and
• Resolve disputes or enforce agreements.

Medical and consultation records are typically retained for a minimum of 7 years, unless longer retention is required by law.

6. Data Security

We use administrative, technical, and organizational safeguards to protect your data against:

• Unauthorized access, disclosure, or alteration,
• Accidental loss, destruction, or theft,
• Cyber threats or malicious attacks.

You are responsible for maintaining the security of your device and login credentials, including:

• Using strong passwords,
• Avoiding public/shared devices, and
• Not using rooted or jailbroken phones with the Ohealth App.

7. Children’s Privacy

Ohealth services are intended for users aged 18 and above. Parents or guardians may manage accounts for minors, provided explicit parental consent is obtained.

If we become aware that a minor has registered without consent, we will delete such data promptly.

8. Cookies and Tracking Technologies

Our website and app may use cookies, analytics tools, and similar technologies to:

• Recognize returning users,
• Analyze usage trends,
• Enhance app performance and personalization.

You can disable cookies through your browser settings. However, certain functions may not work properly if you do so.

9. International Data Transfers

Your personal information may be transferred to and processed in other countries where our servers or service providers are located. We ensure that all such transfers comply with applicable data protection standards and include adequate safeguards (e.g., contractual clauses).

10. Your Data Protection Rights

You have the following rights under NDPR and similar regulations:

• Access – request copies of your personal data.
• Rectification – request correction of inaccurate data.
• Erasure – request deletion of data (“right to be forgotten”).
• Restriction – request limitation of data processing.
• Objection – object to specific processing (e.g., marketing).
• Portability – request transfer of data to another provider.
• Withdraw Consent – revoke previously granted permissions.

To exercise these rights, please contact us at contact@ohealthng.com. We may request verification to ensure your identity before processing such requests.

11. Data Breach Notification

If a data breach occurs that may compromise your personal information, Ohealth will:

• Notify you and the Nigerian Data Protection Commission (NDPC) promptly, and
• Take all reasonable steps to contain and mitigate the breach.

12. Disclaimer and Limitation of Liability

While Ohealth takes all reasonable steps to secure and maintain the integrity of your personal data, we do not guarantee absolute security.

To the fullest extent permitted by law:

• Ohealth, its affiliates, officers, employees, and partners shall not be liable for any arising from:indirect, incidental, consequential, or punitive damages

  • ○ Unauthorized access or use of your personal data beyond our reasonable control;
  • ○ Reliance on medical advice, diagnosis, or information obtained via the Ohealth Platform;
  • ○ Errors, interruptions, or service unavailability due to external systems or network failures;
  • ○ Third-party actions, omissions, or data misuse beyond our oversight.

All medical or wellness information provided through Ohealth is for professional consultation purposes onlyand does not replace emergency medical services.

Ohealth acts solely as a digital facilitator between users and licensed healthcare providers and assumes no liability for clinical decisions, outcomes, or medical negligence by practitioners.

Nothing in this Policy limits liability for fraud, gross negligence, or any matter that cannot legally be excluded.

13. Third-Party Links

The Ohealth Platform may contain links to external websites, laboratories, or pharmacies operated by third parties.

We are not responsible for the privacy practices, accuracy, or content of such websites.

We encourage you to review their respective privacy policies before sharing any personal data.

14. Changes to This Privacy Policy

Ohealth reserves the right to modify or update this Privacy Policy at any time. Updates will be posted on our website and communicated through the App or email where appropriate.

Your continued use of the Ohealth Platform after changes indicates your acceptance of the revised policy.