Effective Date: 23 July 2026 · Last Updated: 23 July 2026

This Privacy Policy explains how HealFast Nigeria Limited, operating under the brand name HealFast Mobile Clinic (“HealFast”, “we”, “us”, or “our”), collects, uses, processes, stores, protects, and discloses personal information when you use our websites, mobile platforms, digital services, medical voucher systems, healthcare services, mobile clinic services, diagnostic services, primary healthcare services, patient services, customer support channels, or otherwise interact with us. We are committed to protecting the privacy, confidentiality, and security of personal information entrusted to us.

This Privacy Policy is intended to operate in accordance with applicable laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023 (NDPA) and other applicable privacy, healthcare, consumer protection, cybersecurity, medical confidentiality, and regulatory requirements. By using our services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

The entity responsible for the processing of your personal information under this Privacy Policy is:

• Legal Name: HealFast Nigeria Limited
• Trading Name: HealFast Mobile Clinic
• Website: HealFast Africa
• Country of Operation: Nigeria

For privacy-related enquiries, requests, complaints, or data-subject rights requests, you may contact HealFast through the official contact channels published on our website. Where HealFast appoints a Data Protection Officer or designated privacy contact, the relevant contact details will be published or made available to data subjects.

2. Information We Collect

2.1 Identity and Contact Information

• Full name; date of birth; gender or sex where relevant to healthcare delivery;
• Telephone number; email address; residential or contact address;
• Emergency contact information; identification information where legally required;
• Patient or customer identification numbers; account credentials.

2.2 Health and Medical Information

Where necessary to provide healthcare services, we may collect and process information including: medical history, symptoms and complaints; allergies and current medications; previous diagnoses; laboratory and diagnostic results; vital signs and pregnancy-related information; blood group information and test results; treatment and referral information; clinical notes and healthcare records; information provided during consultations; and other information reasonably necessary for safe and appropriate healthcare. Health information is treated as confidential and is processed with heightened safeguards.

2.3 Payment and Transaction Information

When you purchase services, healthcare plans, medical vouchers, diagnostic tests, or other products or services, we may process: transaction reference, amount paid, and date/time of transaction; payment status and billing information; voucher number or voucher identifier; and subscription or plan information. Payment card details and certain financial information may be processed directly by authorised third-party payment providers under their own privacy policies and applicable security obligations.

2.4 Technical and Usage Information

When you interact with our website or digital services, we may collect: IP address, browser type, device information, and operating system; website activity, pages visited, and referral information; approximate location derived from technical information; cookies and similar technologies; and log and diagnostic information.

2.5 Communications

We may retain communications between you and HealFast, including emails, telephone records where legally permitted, WhatsApp or messaging communications, customer support requests, appointment requests, feedback, complaints, and service-related correspondence.

3. How We Use Your Information

We may process personal information for legitimate and necessary purposes, including: providing healthcare and medical services; delivering mobile clinic services; scheduling and managing appointments; processing diagnostic tests and communicating results; managing patient records; providing primary healthcare services; administering healthcare plans and memberships; issuing, validating, managing, and redeeming medical vouchers; processing payments, transactions, and eligible refunds; communicating appointment reminders and service notifications; providing customer support; managing referrals; maintaining accurate medical and administrative records; protecting patient safety; preventing fraud, abuse, and unauthorised transactions; complying with legal and regulatory obligations; responding to lawful requests from competent authorities; improving our services and operations; monitoring system security; conducting internal audits and quality assurance; performing legitimate business analytics; sending marketing communications where permitted by law and, where required, with your consent; managing complaints, disputes, and legal claims; and protecting the rights, property, safety, and security of HealFast, our patients, employees, healthcare professionals, and third parties.

We will not process personal information for purposes that are incompatible with the purpose for which it was collected unless permitted or required by applicable law or otherwise lawfully authorised.

4. Lawful Bases for Processing

Depending on the circumstances, HealFast may process personal information on one or more lawful bases recognised under applicable Nigerian data protection law, including: your consent; performance of a contract or steps taken at your request before entering into a contract; compliance with a legal or regulatory obligation; protection of vital interests; performance of a task carried out in the public interest where applicable; and legitimate interests, where permitted by law and where those interests do not override your fundamental rights and freedoms. Where consent is relied upon, you may withdraw your consent where permitted by law; withdrawal will not affect processing already carried out lawfully before withdrawal.

5. Health Information and Medical Confidentiality

HealFast recognises the sensitive nature of health information. We take reasonable and appropriate measures to maintain the confidentiality of patient information and restrict access to authorised personnel and service providers who require such information for legitimate purposes. Medical information may be accessed or disclosed where reasonably necessary for: providing healthcare, coordinating patient care, and diagnostic testing; referral and continuity of care; emergency medical situations and patient safety; legal or regulatory compliance and public health obligations; fraud prevention and protection of vital interests; and compliance with a lawful order or request from a competent authority. We will not intentionally disclose identifiable health information to unrelated third parties for marketing purposes without a lawful basis and, where required, appropriate consent.

6. Sharing Personal Information

We may share personal information only where reasonably necessary and lawful. Recipients may include: healthcare professionals, medical laboratories, and diagnostic service providers; referral hospitals and healthcare facilities; payment processors, technology providers, cloud hosting providers, and IT/cybersecurity providers; customer support providers, professional advisers, auditors, and insurers where applicable; regulatory authorities, government agencies, and law enforcement agencies where legally required; and other authorised service providers. Where we engage third-party processors, we take reasonable steps to ensure that they process information only for authorised purposes and maintain appropriate confidentiality and security measures.

7. International Data Transfers

Where personal information is transferred, stored, or processed outside Nigeria, HealFast will take reasonable steps to ensure that such transfers are conducted in accordance with applicable Nigerian data protection requirements. This may include contractual safeguards, appropriate security measures, adequacy mechanisms, or other lawful transfer mechanisms recognised under applicable law.

8. Data Security

HealFast takes reasonable technical and organisational measures designed to protect personal information against unauthorised access or disclosure; accidental loss, destruction, or alteration; and misuse or unlawful processing. Security measures may include access controls, authentication, encryption where appropriate, secure hosting, monitoring, backups, logging, employee confidentiality obligations, and other reasonable safeguards. However, no digital system or method of transmission can be guaranteed to be completely secure.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or for as long as required by applicable law, regulatory requirements, medical record obligations, contractual requirements, dispute resolution, or legitimate business purposes. Medical and healthcare records may be retained for longer periods where required or reasonably necessary for clinical, legal, regulatory, or patient-safety purposes. When information is no longer required, we may securely delete, anonymise, or otherwise dispose of it in accordance with applicable law and our internal retention procedures.

10. Your Data Protection Rights

Subject to applicable law and relevant limitations, you may have rights including:

• The right to be informed about the processing of your personal information;
• The right to request access to personal information held about you;
• The right to request correction of inaccurate or incomplete information;
• The right to object to certain processing;
• The right to request restriction of processing in applicable circumstances;
• The right to request deletion or erasure where legally available;
• The right to data portability where applicable;
• The right to withdraw consent where processing is based on consent;
• The right to complain about unlawful or improper processing;
• Rights relating to automated decision-making where applicable.

Some rights are subject to legal exceptions. For example, HealFast may be required to retain certain healthcare, financial, transactional, or regulatory records even when a deletion request is made.

11. Children and Minors

Where healthcare services are provided to children or persons who cannot legally provide consent, HealFast may process information through a parent, guardian, authorised representative, or other lawful basis. Where appropriate, HealFast may take reasonable steps to verify the authority of a person acting on behalf of a minor or another individual.

12. Cookies and Similar Technologies

Our website may use cookies and similar technologies to: enable essential website functionality; remember preferences and improve performance; understand website usage and analyse traffic; and maintain security and improve user experience. Where legally required, we will provide appropriate choices regarding non-essential cookies. You may configure your browser to reject certain cookies, although doing so may affect website functionality.

13. Marketing Communications

Where permitted by applicable law, HealFast may send information about services, health programmes, promotions, campaigns, or other relevant offerings. Where consent is required, we will seek appropriate consent. You may unsubscribe from marketing communications at any time. Unsubscribing will not necessarily stop essential service communications, such as appointment reminders, payment confirmations, voucher notifications, healthcare communications, security alerts, or other transactional messages.

14. Data Breaches

Where a personal data breach occurs, HealFast will take reasonable steps to investigate, contain, mitigate, and remediate the incident. Where notification is required under applicable law, HealFast will make the necessary notifications to relevant regulatory authorities and affected individuals within applicable legal requirements.

15. Third-Party Websites

Our website or communications may contain links to third-party websites, applications, payment platforms, or services. HealFast is not responsible for the privacy practices of third parties that operate independently from us. We encourage users to review the privacy policies of third-party services before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services or technology, changes in applicable law or regulatory requirements, or changes in our data-processing practices. The updated version will be published through appropriate channels, with the effective date updated accordingly.

17. Contact and Privacy Requests

For privacy enquiries, data-subject requests, complaints, or questions regarding this Privacy Policy, please contact HealFast through the official contact information published on the HealFast website. When submitting a request, you may be required to provide sufficient information to verify your identity and protect against unauthorised access to personal information.

18. Governing Law

This Privacy Policy shall be governed by the laws of the Federal Republic of Nigeria, subject to applicable data protection and privacy legislation.

HealFast Nigeria Limited - Trading as HealFast Mobile Clinic