RevoHealth HMO ("RevoHealth", "we", "us", "our") is a Society for Family Health initiative, licensed by the National Health Insurance Authority of Nigeria. This policy explains how we collect, use, share, and protect your personal data, and the rights you have over it.
1. Introduction
This Privacy Policy applies to information we collect when you use the RevoHealth website, the AccessCare member platform, our mobile applications, or interact with our care team. It is governed by the Nigeria Data Protection Regulation (NDPR) and relevant guidance from the National Health Insurance Authority (NHIA).
By using our services, you agree to the practices described in this policy. If you do not agree, please do not use our services.
2. Information we collect
We collect information you give us directly, information collected automatically as you use our services, and information from third parties (for example, our partner hospitals).
Information you provide
- Identity data, name, date of birth, NIN, photograph
- Contact data, email, phone number, postal address
- Health data, medical history, prescriptions, claims, telemedicine consultations
- Plan data, chosen tier, dependants, payment records
Information collected automatically
- Device data, IP address, browser, operating system
- Usage data, pages viewed, features used, session length
- Location data, approximate location to surface nearby providers (only with your permission)
3. How we use your information
We use your data to operate our services, deliver care, and meet our regulatory obligations. Specifically:
- To enrol you, manage your plan, and process claims
- To connect you with partner hospitals and telemedicine doctors
- To verify identity and prevent fraud
- To improve our services and develop new features
- To communicate plan updates, NHIA notices, and service changes
- To meet our obligations under NDPR, the National Health Insurance Authority Act, and other applicable laws
6. Data retention
We retain your data only as long as needed for the purposes described in this policy and to meet legal, accounting, or reporting requirements. Health records are retained in line with NHIA guidance and the Nigerian Code of Medical Ethics.
7. Data security
We use a combination of technical and organisational measures to protect your data, encryption in transit and at rest, role-based access controls, audit logs, and regular penetration testing. Despite our best efforts, no system is 100% secure, and we cannot guarantee the security of any information transmitted over the internet.
8. Your rights under NDPR
The Nigeria Data Protection Regulation gives you the following rights over your personal data:
- Access, request a copy of the personal data we hold about you.
- Rectification, ask us to correct inaccurate or incomplete data.
- Erasure, ask us to delete your data, subject to our legal obligations.
- Restriction, ask us to pause processing in certain circumstances.
- Portability, receive your data in a structured, machine-readable format.
- Objection, object to processing based on legitimate interests, including marketing.
To exercise any of these rights, contact our Data Protection Officer, see the contact section below.
9. International transfers
Some of our service providers operate outside Nigeria. When we transfer your data internationally, we ensure appropriate safeguards are in place, typically standard contractual clauses or transfers to jurisdictions with adequate data-protection regimes, as recognised by the Nigeria Data Protection Commission.
10. Children's privacy
RevoHealth services are intended for adults. We collect information about children only when they are enrolled as dependants on a parent or guardian's plan, and only with the parent or guardian's consent.
11. Changes to this policy
We may update this policy from time to time. When we do, we will post the updated version on this page and revise the "Last updated" date. Material changes will be communicated to active members directly.
12. Contact us
For privacy questions, requests under NDPR, or to reach our Data Protection Officer:
- Email: dpo@revohealthhmo.com
- Phone: (+234) 800 0000 000
- Address: 8 Port Harcourt Crescent, Garki II, Abuja, FCT 900103