Privacy policy
This policy explains how Skinova Clinic Abuja (“we”) collects and uses your personal data, including health information, and your rights under the Nigeria Data Protection Act 2023.
Who we are
Skinova Clinic Abuja is responsible (the “data controller”) for the personal data described here. To ask about your data, contact the clinic using the details on our contact page.
What we collect
- Identity and contact details: name, date of birth, phone, email, address, emergency contact.
- Health information you give us or that our practitioners record: medical history, allergies, medicines, skin concerns, consultation notes, treatment plans, prescriptions and clinical photographs.
- Booking and payment records: appointments, invoices and payments. Card payments are handled by our payment provider; we do not receive your card number.
- Technical data needed to keep the website secure, such as sign-in records.
Why we use it and our legal basis
- To provide care and manage your appointments — to perform our contract with you and, for health information, for the purposes of medical care.
- To take payments and keep financial records — legal obligation and contract.
- To send appointment reminders and service messages — contract and legitimate interests.
- To send marketing messages — only with your consent, which you can withdraw at any time.
- To use clinical photographs in marketing — only with separate, specific written consent.
Who we share it with
Your care team at the clinic, and service providers who process data for us under contract: our website host, payment provider, email provider and video consultation provider. Some of these may process data outside Nigeria; where they do, we rely on the safeguards permitted by the Act. We do not sell your data. We share information with others only with your consent or where the law requires it.
Artificial intelligence
If the clinic uses AI tools, they assist staff with administrative tasks. They do not diagnose or decide your treatment, and your identifiable health records are not sent to AI providers without appropriate safeguards.
Your rights
You may ask to access your data, correct it, receive a copy, object to or restrict certain uses, withdraw consent, and ask for deletion where the law allows (some medical and financial records must be kept). You may also complain to the Nigeria Data Protection Commission. To make a request, contact us using the details above; we may need to confirm your identity.
Security
Your records are kept in an access-controlled system. Staff only see what their role needs, sensitive records are encrypted, and access to records is logged.