Legal
Privacy notice
This notice explains how SkyHigh Medical Centre collects, uses, stores and protects your personal information, including your health information, and what rights you have over it. It is written to the Nigeria Data Protection Act 2023 and the standards of the Nigeria Data Protection Commission.
What we collect
We collect information you give us directly, including your name, contact details, date of birth, next of kin, HMO or insurance details, and the clinical information recorded during your care. We also collect information generated in the course of treatment, such as test results, imaging, prescriptions and clinical notes.
Through this website we collect what you submit in the booking and enquiry forms, and standard technical information such as pages visited and approximate location, used to keep the site working and to understand which information people are looking for.
Why we use it
- To provide clinical care and maintain an accurate medical record
- To contact you about appointments, results and follow up
- To process payment and, where applicable, claims through your HMO or insurer
- To meet legal, regulatory and professional obligations, including record retention
- To improve the quality and safety of the services we provide
Who we share it with
We share your information only where necessary: with clinicians involved in your care, with your HMO or insurer where they are funding treatment, with laboratories or specialists to whom you are referred, and with regulators or authorities where the law requires it. We do not sell your information, and we do not share it for advertising.
How long we keep it
Medical records are retained in line with Nigerian regulatory and professional requirements, which for adult records is a minimum of six years from the date of last attendance, and for children until their twenty fifth birthday. Website enquiry data is retained only as long as needed to deal with the enquiry.
How we protect it
Access to records is restricted to staff who need it for your care or for administration. Electronic systems are access controlled and encrypted in transit. All staff are bound by professional and contractual confidentiality obligations.
Your rights
- To ask what information we hold about you and to receive a copy
- To ask us to correct information that is inaccurate
- To object to certain uses of your information
- To withdraw consent where processing is based on consent
- To complain to us, and to the Nigeria Data Protection Commission
Contact
To exercise any of these rights, or to raise a concern about how your information is handled, contact the hospital on +234 810 099 6560 or by email at clientservices@skyhighmedicalcentre.com, marking your message for the attention of the data protection contact.