Who we are

DemyHealth provides healthcare, laboratory, DNA/genetic testing, diagnostics, telemedicine-adjacent and health information services in Nigeria.

Information we collect

We may collect names, contact details, dates of birth, sex, nationality, appointment details, samples, test requests, results, payment references, website/device data, enquiries, service enquiries and partner records.

Health and genetic data

Some information processed by DemyHealth, including health information, DNA/genetic information, laboratory results, and sexual health-related information, may qualify as sensitive personal data.

DNA and relationship testing data

DNA testing information may include identity details, relationship claims, sample collection data, chain-of-custody records where applicable and result reports.

Payment and transaction data

Payment status, invoice, receipt and transaction references may be processed to administer services and records.

Website/device/cookie data

We may process essential website data and cookie preferences. Non-essential analytics or marketing cookies should not be deployed before consent unless permitted by law.

Why we collect data

We collect data to respond to enquiries, book tests, collect samples, process results, support clinical/laboratory operations, manage accounts, comply with legal duties and improve services.

Legal basis for processing

Processing may rely on consent, contract performance, legal obligation, vital interests, public interest in health, legitimate interests and other lawful bases under applicable Nigerian law, including the Nigeria Data Protection Act 2023.

Consent

Consent must be specific, informed, freely given and not pre-ticked. You may withdraw consent where applicable, but withdrawal may affect services already requested or legal record retention.

How we use patient/client data

We use data for scheduling, sample collection, diagnostics, reporting, billing, patient support, quality assurance, governance, audit and authorised communications.

How we share data

Data may be shared with authorised staff, clinicians, laboratories, logistics providers, technology providers, payment processors, regulators, courts or partners only where appropriate and lawful.

Third-party service providers

Service providers must process data only for authorised purposes and under appropriate confidentiality and security obligations.

Cross-border transfer where applicable

Where data is transferred outside Nigeria, DemyHealth will seek appropriate safeguards required by applicable data protection law.

Data security

DemyHealth uses reasonable technical, administrative and organisational safeguards. No website, email, portal or laboratory system can be guaranteed to be completely risk-free.

Data retention

Records are retained for operational, clinical, legal, regulatory, audit and dispute-resolution needs. Exact retention periods should be confirmed and configured by administrators with legal advice.

Children/minors data

Data about minors should be submitted only by a parent, legal guardian or legally authorised person, especially for DNA testing.

Data subject rights

You may request access, correction, objection, restriction, portability, deletion/erasure where applicable, withdrawal of consent, complaint review and protection from solely automated decisions where applicable.

How to contact DemyHealth

Abuja – 08092776069 Lagos – 07065838743 Onitsha – 08145240114 Aba – 08164289092

Complaints and regulatory escalation

You may contact DemyHealth first. You may also escalate complaints to the competent Nigerian data protection regulator where applicable.

Policy updates

DemyHealth may update this policy. Older policy versions should be retained for audit traceability. DemyHealth does not sell patient or client personal health information.

Privacy Policy