Privacy Policy

Nuriva Care is not a public social network or a patient-facing search directory. It is a private software tool used by authorised staff within a clinic. Access to any patient information is restricted to the clinic's own authorised users and is governed by the clinic's internal policies and applicable law.

In this policy, "you" refers to the clinic, its staff, and any patient who interacts with the clinic through Nuriva Care (for example, to view a queue position or a medical record). "We", "us", and "our" refer to Nuriva Care.

We collect information needed to operate the clinic management system:

• Clinic and account data: clinic name, contact details, subscription plan, billing information, and administrator credentials.
• Staff data: names, roles, email addresses, phone numbers, and account activity for authorised users.
• Patient data: names, dates of birth, contact details, gender, medical history, symptoms, diagnoses, prescriptions, vital signs, laboratory results, appointment notes, and other clinical information entered by authorised staff.
• Operational data: appointment dates and times, queue numbers, consultation records, billing line items, and payment transactions.
• Technical data: IP address, browser type, device information, log data, and cookies or similar technologies used to keep sessions secure and improve the service.

We use collected information solely to provide and support the clinic management service:

• Registering patients, managing appointments, and running the live queue.
• Creating and updating digital medical records and consultation notes.
• Processing billing, invoices, and payments.
• Authenticating users, enforcing role-based access, and maintaining security.
• Sending service-related notifications, reminders, and support messages.
• Complying with legal obligations and resolving disputes.
• Analysing usage to improve reliability, performance, and user experience (without selling personal data).

We process personal data on the basis of:

• Contract: to provide the clinic management service to subscribing clinics.
• Consent: where the clinic or patient has explicitly agreed (for example, to optional communications).
• Legal obligation: to comply with applicable Nigerian laws and healthcare record-keeping requirements.
• Legitimate interests: to protect accounts, prevent fraud, and keep the service secure.

Patient information is shared only within the authorised staff of the clinic that created it. We do not sell, rent, or trade personal data to third parties for marketing.

We may share data with the following categories of service providers, strictly for operational purposes:

• Cloud infrastructure and database: to securely host and store the application data.
• Payment processors: Paystack is used to process subscription and invoice payments. Paystack receives payment and limited billing information in accordance with its own privacy policy.
• Email and messaging services: to deliver transactional notifications and support responses.

We may also disclose data if required by law, to enforce our agreements, or to protect the rights, safety, or property of Nuriva Care, the clinic, patients, or others.

We implement appropriate technical and organisational measures to protect information:

• Encrypted connections (TLS/SSL) between your browser and our servers.
• Encrypted data at rest in the database.
• Role-based access controls so only authorised staff can view or modify records.
• Multi-factor authentication (MFA) for staff accounts.
• Audit logs that record key actions for accountability.
• Regular backups and monitoring designed to detect and respond to security issues.

No system is completely secure. The clinic remains responsible for keeping its own user credentials, devices, and internal procedures safe. If you suspect unauthorised access, contact us immediately.

We retain clinic and patient data for as long as the clinic account is active, or for the period necessary to fulfil the purposes described in this policy, whichever is longer. After account closure, we may retain anonymised records or legally required records for audit, tax, legal, or regulatory purposes, then securely delete or de-identify the data.

Clinics may request deletion of specific records or data exports by contacting us at the details below, subject to legal and clinical retention obligations.

Depending on applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of data that is no longer required.
• Request a copy of your data in a portable format.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.

Patient requests should be directed to the clinic using Nuriva Care, since the clinic is the data controller for its patients. We will assist the clinic in responding to valid requests. Staff and administrators may exercise their rights by contacting us directly.

Nuriva Care uses cookies and local storage to keep you signed in, remember preferences, and understand how the application is used. You can control cookies through your browser settings, but disabling essential cookies may prevent parts of the service from working.

The service uses trusted third-party providers for hosting, authentication, payment processing, and communications. These providers are contractually bound to handle data appropriately and securely. Payment details entered on Paystack checkout pages are processed by Paystack and subject to Paystack's privacy practices.

When you click a WhatsApp or email support link, you leave Nuriva Care and are subject to the respective service provider's terms.

Nuriva Care is intended for use by healthcare providers. Patient records may include information about minors under the care of the clinic. We do not knowingly collect data directly from children through public-facing features of the website.

Nuriva Care provides the software platform "as is" to assist clinics in managing their operations. We are not a medical service provider, and we do not provide clinical advice. The clinic is solely responsible for the accuracy of the data entered and the medical decisions made by its staff.

To the fullest extent permitted by law, Nuriva Care is not liable for any indirect, incidental, or consequential damages arising from the use or inability to use the service, unauthorised access caused by the clinic's failure to maintain account security, or actions taken by clinic staff using the platform.

We may update this Privacy Policy from time to time. We will post the revised version with a new effective date and, where appropriate, notify the clinic administrator. Continued use of Nuriva Care after changes means acceptance of the updated policy.

For privacy-related questions, data subject requests, or security concerns, please contact us using the details below: