Introduction
NHISMRS ("National Health Insurance Scheme Medical Records System", "the App") is a healthcare management application developed and operated by InstratGHS ("we", "us", or "our"). This Privacy Policy describes how NHISMRS collects, uses, and protects your personal health information when you access our healthcare management services within the Nigerian healthcare system. This policy complies with Nigerian data protection laws and healthcare regulations.
Information We Collect
Personal Health Information
- Medical records and health history
- Treatment plans and diagnoses
- Laboratory results and test reports
- Prescription and medication information
Personal Identification Information
- Name, date of birth, and contact information
- National Identification Number (NIN)
- National Health Insurance Scheme (NHIS) number
- State of origin and local government area
- Insurance and billing information
- Emergency contact details
Technical Information
- Login credentials and access logs
- Device information and IP addresses
- System usage patterns for security purposes
How We Use Your Information
We use your information exclusively for:
- Providing medical care and treatment
- Maintaining accurate health records
- Coordinating care between healthcare providers
- Ensuring system security and preventing unauthorized access
- Complying with legal and regulatory requirements
Information Sharing
We do not sell, trade, or share your personal health information except:
- With your healthcare team for treatment purposes
- When required by Nigerian law or court order
- For emergency medical situations
- With National Health Insurance Scheme (NHIS) for coverage verification
- With your explicit written consent
Data Security
We implement industry-standard security measures including:
- Encrypted data transmission and storage
- Multi-factor authentication systems
- Regular security audits and updates
- Restricted access on a need-to-know basis
- Secure backup and disaster recovery procedures
Data Retention
We retain your personal health information only for as long as necessary to fulfil the purposes described in this policy and to comply with Nigerian legal and regulatory obligations:
- Medical records are retained for the period required by Federal Ministry of Health and NHIS regulations, generally for at least ten (10) years after the last patient contact.
- Access logs and technical data are retained for a limited period for security and audit purposes, after which they are deleted.
- When data is no longer needed and no legal retention obligation applies, it is securely deleted or anonymised.
- You may request deletion of your data at any time, subject to applicable legal retention requirements.
Your Rights Under Nigerian Law
Under the Nigeria Data Protection Regulation (NDPR), you have the right to:
- Access your medical records and personal data
- Request corrections to inaccurate information
- Receive copies of your health information
- Request restrictions on information sharing
- Object to processing of your personal data
- Request deletion of your data (subject to legal retention requirements)
- File complaints with the National Information Technology Development Agency (NITDA)
- Withdraw consent for voluntary data processing
- Be informed of any data breaches affecting your information
Changes to This Policy
We may update this privacy policy periodically. Any changes will be posted on this page with an updated revision date. Continued use of the NHISMRS app constitutes acceptance of the updated policy.
Compliance
This privacy policy complies with:
- Nigeria Data Protection Regulation (NDPR), 2019
- Nigerian National Health Act, 2014
- Federal Ministry of Health Guidelines
- National Health Insurance Scheme (NHIS) Regulations
- Medical and Dental Council of Nigeria (MDCN) Guidelines
← Back to Portal