Introduction
NHMIS MRS ("the App") is a healthcare management application developed and operated by InstratGHS ("we", "us", or "our"). This Privacy Policy describes how NHMIS MRS collects, uses, and protects your personal health information when you access our healthcare management services within the Nigerian healthcare system. This policy complies with Nigerian data protection laws and healthcare regulations.
Information We Collect
Personal Health Information
- Medical records and health history
- Treatment plans and diagnoses
- Laboratory results and test reports
- Prescription and medication information
Personal Identification Information
- Name, date of birth, and contact information
- National Identification Number (NIN)
- Bank Verification Number (BVN) if required
- National Health Insurance Scheme (NHIS) number
- State of origin and local government area
- Insurance and billing information
- Emergency contact details
Technical Information
- Login credentials and access logs
- Device information and IP addresses
- System usage patterns for security purposes
How We Use Your Information
We use your information exclusively for:
- Providing medical care and treatment
- Maintaining accurate health records
- Coordinating care between healthcare providers
- Ensuring system security and preventing unauthorized access
- Complying with legal and regulatory requirements
Information Sharing
We do not sell, trade, or share your personal health information except:
- With your healthcare team for treatment purposes
- When required by Nigerian law or court order
- For emergency medical situations
- With National Health Insurance Scheme (NHIS) for coverage verification
- With Federal Ministry of Health for public health monitoring
- With your explicit written consent
Nigerian Healthcare System Integration
As part of the Nigerian healthcare ecosystem, we may share relevant health information with:
- Licensed healthcare facilities within Nigeria
- National Health Insurance Scheme (NHIS) for claims processing
- Federal Ministry of Health for epidemiological studies
- Nigeria Centre for Disease Control (NCDC) for disease surveillance
- State Health Ministries for regional health planning
All sharing is done in strict compliance with Nigerian data protection laws and only for legitimate healthcare purposes.
Data Security
We implement industry-standard security measures including:
- Encrypted data transmission and storage
- Multi-factor authentication systems
- Regular security audits and updates
- Restricted access on a need-to-know basis
- Secure backup and disaster recovery procedures
Your Rights Under Nigerian Law
Under the Nigeria Data Protection Regulation (NDPR), you have the right to:
- Access your medical records and personal data
- Request corrections to inaccurate information
- Receive copies of your health information
- Request restrictions on information sharing
- Data portability - transfer your data to another provider
- Object to processing of your personal data
- Request deletion of your data (subject to legal retention requirements)
- File complaints with the National Information Technology Development Agency (NITDA)
- Withdraw consent for voluntary data processing
- Be informed of any data breaches affecting your information
Data Retention
We retain your health information in accordance with:
- Nigerian National Health Act requirements
- Medical and Dental Council of Nigeria (MDCN) guidelines
- Federal Ministry of Health record retention policies
- Nigeria Data Protection Regulation (NDPR) requirements
- International healthcare standards and best practices
International Data Transfers
Your data is stored and processed within Nigeria in compliance with Nigerian data protection regulations. Any international transfers comply with the Nigeria Data Protection Regulation (NDPR) and applicable healthcare laws.
Changes to This Policy
We may update this privacy policy periodically. Any changes will be posted on this page with an updated revision date. Continued use of the NHMIS MRS app constitutes acceptance of the updated policy. We encourage you to review this policy regularly.
Compliance
This privacy policy complies with:
- Nigeria Data Protection Regulation (NDPR), 2019
- Nigerian National Health Act, 2014
- Federal Ministry of Health Guidelines
- National Health Insurance Scheme (NHIS) Regulations
- Medical and Dental Council of Nigeria (MDCN) Guidelines
- International healthcare data protection standards
← Back to Portal