EZZYCARE®

Privacy Policy

For care seekers, doctors, hospitals, booking agents and other platform users

Effective date: 20 August 2026  |  Last updated: 20 August 2026

EzzyCare Global Innovations Ltd (“EzzyCare”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you use the EzzyCare mobile application, website, dashboards, communications and related services (together, the “Platform”).

EzzyCare connects healthcare seekers with verified nearby private doctors and hospital-based doctors and supports appointment discovery, booking, payment, communication and consultation coordination. By using the Platform, you acknowledge that you have read this Privacy Policy. Where the law requires consent— particularly for certain processing of health, location or other sensitive personal data—we will request it separately and clearly.

1. Scope of this Policy

This Policy applies to care seekers, parents or guardians acting for minors, doctors, hospital representatives, booking agents, website visitors, prospective users and anyone who contacts or otherwise interacts with EzzyCare through the Platform.

This Policy does not replace the professional privacy notices, medical confidentiality obligations or records policies of a doctor, hospital, laboratory, pharmacy or other healthcare provider. Those providers may process your information independently for clinical care, diagnosis, treatment, medical-record management and legal compliance. You should review the provider’s own privacy information where it is made available.

2. Who Controls Your Personal Data

For personal data processed to operate the Platform, manage accounts, coordinate bookings, prevent fraud, provide support and administer payments, EzzyCare Global Innovations Ltd generally acts as a data controller.

For personal data processed by a doctor or hospital to provide healthcare, the relevant doctor or hospital may act as a separate data controller. In some arrangements, EzzyCare may process information on a hospital’s instructions as a data processor. The role applicable to a particular processing activity depends on who determines why and how that information is processed.

Company address: No. 448 Reuben Okoya Crescent, Wuye, Abuja, Nigeria.

Privacy and support email: [email protected] | Telephone: +234 912 424 0527.

3. Personal Data We Collect

3.1 Account and identity information

We collect only the basic biodata and account information reasonably needed to identify you, secure your account and coordinate an appointment. This may include your name, photograph, date of birth or age, sex or gender where relevant to care, email address, telephone number, residential or contact address, password or authentication information, user role, emergency contact and government-issued identification where verification or law requires it.

3.2 Care-seeker information and optional health uploads

For registration and ordinary booking, care seekers should provide only basic biodata and the minimum appointment details requested. Do not disclose diagnoses, detailed medical history, intimate information or other sensitive health information in profile fields, booking forms, support messages, public reviews or other general areas of the Platform. Sensitive information should be given directly to the doctor during the consultation.

Uploading laboratory tests, imaging, reports or other examination findings for a selected doctor or hospital is optional. If you choose to upload them, they are sensitive personal data and are intended only for the selected doctor or hospital to review for the consultation. The receiving provider must use them for care and handle them under professional confidentiality duties, applicable law and the provider's own privacy and medical-record policies.

3.3 Doctor and healthcare-professional information

We may collect professional qualifications, department, practising licence and registration details, year of graduation, experience, employment or hospital affiliation, availability, consultation modes, fees, payout information, professional profile, identity-verification information, ratings, reviews and appointment-performance information.

3.4 Hospital and booking-agent information

We may collect facility name and address, registration and accreditation details, departments, authorised representatives, staff and doctor assignments, appointment and service information, consultation fees, payment-split instructions, settlement details and activity performed through hospital or booking-agent dashboards.

3.5 Appointment and communication information

We may collect appointment dates, times, status, chosen provider and location, consultation type, rescheduling or cancellation history, messages, support requests, complaints, ratings and reviews. For internet-based audio or video consultations, we process only the connection and call metadata needed to establish, secure and support the session. EzzyCare does not make or retain audio or video recordings of consultations or other live conversations between care seekers and doctors or hospitals.

3.6 Location information

With your device permission, we may collect precise or approximate location to show nearby doctors or hospitals, calculate proximity, support location-based searches or enable requested home-visit services. You can withdraw device-level location permission, but some location-based features may then be unavailable.

3.7 Payment and transaction information

We may collect consultation amount, currency, payment status, transaction reference, refunds, commissions, payouts and settlement records. Payments may be processed by licensed third-party payment providers. EzzyCare should not receive or store full payment-card details when those details are entered directly into a payment provider’s secure interface.

3.8 Device, usage and technical information

We may collect IP address, device type, operating system, app version, browser type, device identifiers, crash logs, diagnostic data, login history, pages or features used, timestamps, push-notification tokens and cookie or similar technology information.

3.9 Information from other sources

We may receive information from hospitals, doctors, authorised booking agents, identity or professional-verification bodies, payment providers, analytics or security vendors, public registers, referral partners and a parent, guardian or authorised representative acting for you.

4. How We Use Personal Data

We process personal data to create and secure accounts; verify users and healthcare providers; show relevant nearby providers; enable appointment booking, rescheduling and cancellation; coordinate video, clinic and home appointments; process payments, refunds, commissions and payouts; send appointment and service notifications; facilitate communications; provide support; manage ratings and reviews; maintain records; investigate complaints; detect and prevent fraud, abuse and security incidents; improve accessibility, reliability and performance; analyse Platform use; comply with law; establish or defend legal claims; and protect users, providers, EzzyCare and the public.

Where permitted, we may use de-identified or aggregated information for statistics, service planning, product improvement, research and business analysis. We will take reasonable steps to prevent such information from being used to identify you.

5. Our Lawful Bases for Processing

Depending on the activity and applicable law, we rely on one or more lawful bases: performance of a contract or steps requested before entering a contract; consent; compliance with a legal obligation; protection of vital interests; performance of a task in the public interest where applicable; and legitimate interests pursued by EzzyCare or another person where those interests are not overridden by your rights and freedoms.

For sensitive personal data, including health data, we also rely on an additional condition permitted by law, such as explicit consent, processing necessary for healthcare or treatment by or under the responsibility of a professional subject to confidentiality, protection of vital interests, establishment or defence of legal claims, substantial public interest, or another lawful condition. We will request explicit consent where it is required and you may withdraw consent at any time, without affecting processing already lawfully carried out.

6. Location-Based Services

The Platform may use location information to rank or display doctors and hospitals near you and to support a home appointment you request. Location results are estimates and do not guarantee a provider’s availability, suitability, travel time or ability to respond to an emergency. You can manage location permissions in your device settings. Where practical, you may search by manually entered location instead of sharing precise device location.

7. Video Consultations, Messages and Notifications

EzzyCare may use internet-based calling, messaging and push notifications to connect care seekers and providers and to alert users about bookings. Network quality, device settings and notification permissions can affect delivery. Users should not include sensitive health information in support messages, public reviews or other non-clinical channels.

Consultation safety and privacy.

Care seekers must conduct video and physical consultations in the presence of a trusted third party they have chosen and are comfortable with. By inviting that person, the care seeker authorises the person to be present and to hear or see information disclosed during the consultation. The care seeker should ensure that the third party respects confidentiality and does not record or disclose the consultation. If a doctor determines that a private portion of the consultation is clinically or legally necessary, the doctor's professional obligations and applicable law will apply.

EzzyCare does not audio- or video-record these consultations. A doctor or hospital may create independent clinical notes or medical records where necessary for care or required by law. The provider - not EzzyCare - determines the content and retention of those independent records, unless EzzyCare has expressly agreed to process them on the provider's documented instructions.

8. When We Share Personal Data

We disclose only the information reasonably necessary for the relevant purpose. We may share personal data with the doctor, hospital or booking agent involved in an appointment; payment processors, banks and settlement partners; cloud hosting, communications, video, notification, analytics, identity-verification, customer-support and cybersecurity providers; professional advisers and insurers; regulators, courts, law-enforcement bodies or other authorities where legally required; and a buyer, investor or successor in connection with a proposed or completed corporate transaction, subject to appropriate confidentiality and legal safeguards. Optional tests or examination findings are made available only to the selected doctor or hospital and to service providers strictly as technically necessary to store, secure or transmit them on EzzyCare's behalf.

We may share information with a parent, guardian, carer or authorised representative where you direct us, where authority has been verified, or where law permits or requires it. We do not sell personal data for money. We do not permit third parties to use health information for their own advertising.

9. International Transfers

Some service providers may host or process data outside Nigeria. Before an international transfer, we will use a transfer mechanism recognised by applicable law and assess whether the destination or recipient provides an adequate level of protection. Where required, we will use contractual safeguards, obtain consent or rely on another lawful basis and apply supplementary security measures appropriate to the risk.

10. Data Retention

We retain personal data only for as long as reasonably necessary to provide the Platform, complete appointments and transactions, meet accounting, tax, audit, anti-fraud and other legal obligations, resolve disputes, enforce agreements and protect users and providers.

After you complete the in-app account-deletion process, EzzyCare deletes or de-identifies ordinary account and profile data. We retain only (a) financial and transaction data required for accounting, tax, audit and other legal compliance purposes, and (b) limited timelines of past appointments, such as the provider, date, consultation type, status and transaction reference. These retained records are access-restricted and kept only for the applicable legal, accounting, dispute-resolution or fraud-prevention period. Optional test results and examination findings held by EzzyCare are deleted or de-identified, subject to any specific legal hold or documented provider instruction that applies. Copies independently retained by a doctor or hospital are governed by that provider's professional and legal record-keeping obligations. Residual copies in protected backups are isolated from ordinary use and removed through the applicable secure backup cycle.

11. How We Protect Personal Data

We use reasonable and proportionate technical and organisational safeguards designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, authentication, encryption in transit and at rest where appropriate, logging, monitoring, staff confidentiality obligations, vendor due diligence, backups, secure software-development practices, incident-response procedures and periodic risk assessments.

No system is completely secure. You are responsible for keeping your password and verification codes confidential, securing your device and promptly notifying us if you suspect unauthorised access to your account.

12. Your Privacy Rights

Subject to applicable law and relevant exceptions, you may have the right to be informed about processing; request access to your personal data; request correction of inaccurate or incomplete data; request deletion; request restriction of processing; object to certain processing, including direct marketing; withdraw consent; receive certain data in a structured, commonly used and machine-readable format and transmit it to another controller; object to certain decisions based solely on automated processing that produce legal or similarly significant effects; and lodge a complaint with the Nigeria Data Protection Commission or another competent authority.

To exercise a right, contact [email protected] or call +234 912 424 0527. We may ask for information necessary to verify your identity and authority. We will respond within the period required by applicable law. A request may be limited or refused where the law permits - for example, to protect another person's rights, preserve a provider's medical records, comply with an accounting or legal obligation, or establish or defend legal claims. If we cannot fulfil a request, we will explain the applicable reason unless prohibited by law.

13. Children and Dependent Care Seekers

The Platform is not intended for a person under 18 to create and operate an account independently unless applicable law permits it and EzzyCare has implemented an appropriate consent process. A parent or legal guardian should create or manage bookings for a minor and provide only information they are authorised to provide. We may take reasonable steps to verify parental or guardian authority and consent. If we learn that a minor’s data was collected without required authorisation, we will take appropriate steps, which may include restricting the account or deleting the data, subject to legal and medical-record obligations.

14. Cookies, Analytics and Similar Technologies

Our website and app may use cookies, software development kits, local storage, pixels and similar technologies to keep the Platform functioning, remember preferences, understand use, diagnose problems, improve performance and measure communications. Where required, non-essential technologies will be used only after consent. You can manage cookie choices through the available consent tool and browser or device settings. Disabling some technologies may affect functionality.

15. Marketing Communications

We may send service communications necessary for your account or appointments. Where permitted and, when required, with your consent, we may also send information about EzzyCare services. You can opt out of marketing using the unsubscribe method provided or by contacting us. Opting out of marketing does not stop essential account, security, payment or appointment messages.

16. Automated Processing

The Platform may use rules or algorithms to support provider search, distance sorting, fraud detection, identity checks, safety monitoring and service recommendations. Unless we notify you otherwise, EzzyCare does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects. Where such processing is used, we will provide information and safeguards required by law, which may include a way to request human review and contest the outcome.

17. Account Closure

You may delete your account through the in-app account-deletion feature or request assistance by emailing [email protected] or calling +234 912 424 0527. After in-app deletion, ordinary account and profile data is deleted or de-identified, while EzzyCare retains only the financial data required for accounting and legal compliance and the limited timelines of past appointments described in Section 10. Deletion from protected backups occurs through the applicable secure backup cycle. A doctor or hospital may separately retain clinical records under its professional and legal obligations.

18. Changes to this Policy

We may update this Policy to reflect changes in the Platform, our practices or the law. We will post the updated version and revise the “Last updated” date. If a change materially affects your rights or how we use sensitive personal data, we will provide additional notice and seek consent where required.

19. Contact Us and Complaints

Questions, requests or complaints about this Policy or our handling of personal data should be sent to:

  • Email: [email protected]
  • Telephone: +234 912 424 0527
  • Address: No. 448 Reuben Okoya Crescent, Wuye, Abuja, Nigeria.

You also have the right to complain to the Nigeria Data Protection Commission. Information about the Commission and complaint channels is available at https://ndpc.gov.ng. We encourage you to contact us first so that we can try to resolve your concern promptly, but you are not required to do so before approaching the Commission.

20. Applicable Privacy Framework

This Policy is intended to be read consistently with the Nigeria Data Protection Act 2023, the Nigeria Data Protection Act - General Application and Implementation Directive 2025, applicable guidance issued by the Nigeria Data Protection Commission, and other laws that apply to EzzyCare's processing of personal data. If a provision of this Policy conflicts with a mandatory legal requirement, the mandatory requirement will prevail.