Introduction

This Privacy Policy describes why we collect information from you, what the information is used for, uses, how you can control the data and how we manage, store, protect, share, retain or delete your information, in connection with your use of our website. This privacy policy will inform you as to how we treat your personal data when you provide your data to us and tell you about your privacy rights and how the law protects you.

Information We Collect

We collect two main types of information on the Website:

• Personal Information: This includes data that can identify you as an individual, such as your full name, email address, phone number, marital status, date of birth, mailing address, NIN and CCTV/Video footage of individuals on our Premises, including visitors, employees, and contractors.
• Non-Personal Information: This data cannot be used to identify you directly. It includes details like your browser type, device type, operating system, IP address, browsing activity, and usage statistics. We collect this information automatically through cookies and other tracking technologies.

How do we collect your Data?

We use different methods to collect data from, and about you.

• When we collect your personal data when you voluntarily provide the same to us in connection with your use of our website, or making a purchase of an health plan. You may give us your data by filling in forms or by corresponding with us by post, phone, email or otherwise.
• When you visit our offices.
• As you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We may collect this personal data by using cookies and other similar technologies.
• From third parties to whom you have legally provided such data to, such as your employer, benefactors, etc. To the extent that such data is disclosed by third parties, different rules may apply to their use or disclosure of your information.

Consent

By filling a consent statement, you agree to the terms of this Privacy Policy, as to allow us to make use of your data to service you more accurately.

It is important that you read this privacy policy together with any other privacy statement we may provide when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data[cite: 98].

How We Use Information

The information we collect allows us to:

• To register and onboard you as a an enrollee on the scheme.
• Operate and maintain the Website effectively.
• Send you newsletters or marketing communications, but only with your consent.
• Respond to your inquiries and process your requests which you make or are made on your behalf with your consent.
• Manage your relationship with us.
• Improve the Website and your user experience.
• Personalize your experience on the Website based on your browsing habits.
• Analyze how the Website is used to improve our services.
• Comply with legal and regulatory requirements.
• To protect our rights and the rights of third parties.
• To keep a record of our transactions and communications.
• Any other purpose that we disclose to you in the course of providing health services to you.

Sharing of Information

We share your personal data with third parties which include:

• Accredited health service providers on the scheme,
• Service providers who assist us in operating the Website and delivering our services. These providers are obligated by contract to keep your information confidential and use it only for the specific purposes we disclose it for.

We will never share your personal information with any third parties for marketing purposes without your explicit consent.

Exception

We could disclose any information about you as required by law and we may make such disclosures to the appropriate law enforcement agencies and government officials, as necessary under the relevant circumstance. Other than these instances, we do not disclose or share your personal data provided to us without your authorisation.

Your Rights in Relation to Our Collection and Processing of Your Personal Data

You are entitled to exercise the following rights in relation to your personal data collected and processed by Avon Healthcare:

1. Right to withdraw consent in relation to the processing of their personal data.
2. Right to be informed regarding their personal data.
3. Right to request for and access any personal data collected and stored by Avon Healthcare.
4. Right to request the deletion of their data.
5. Right to be informed about appropriate safeguards in place where data is transferred abroad.
6. Right to request rectification of personal data which is stored by Avon Healthcare.
7. Right to request the transmission of data from Avon Healthcare to a third party (right to the portability of data).
8. Right to object to automated decision-making and processing.
9. Right to object to direct marketing.
10. Right to request the processing of their information.

Data Storage and Management

We have well-maintained systems for storing and managing your data, and we are committed to conscientiously utilising your data in consonance with the provisions of this policy.

In addition, we limit access to your personal data to only those employees, agents, contractors and other third parties who need to have access to their personal data in order to enable us provide our services to you. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes it was collected for. We may retain it for longer periods only if required or permitted by law.

Security Measures

We have taken measures to protect and prevent your personal data from unauthorized access, disclosure, alteration, or destruction, and will notify you and the applicable regulator of a breach where we are legally required to do so.

We admit however that no database is completely secure or "hacker proof" and we only guarantee the safety of your data to the extent of our undertaking all reasonable measures to protect your data.

Changes to this Privacy Policy

We may review, update this Privacy Policy periodically to ensure compliance with applicable data protection legislation including the NDPA and NDPR, or as a result of changes in our systems and processes arising from the use of technology.

We will notify you of any changes by posting the revised policy on the Website. We also recommend reviewing this policy regularly to stay informed of any updates. Your continuous use of our services after such notice, will be construed as your consent to carry on with the processing of your personal data.