DOCTORA24 · HEALTHCARE, WITHIN REACH
Privacy Policy
Find helpful information about Doctora24, our healthcare services and how to access support through our platform.
Last reviewed: 29 October 2026
1. WHO WE ARE
Doctora24 Limited operates the Doctora24 platform.
Business address:
No. 25 Chediya Ukku Airport Road, Kano, Nigeria.
Email: support@doctora247.com
Telephone: 08101837585.
This policy explains the intended handling of personal information when you use the platform. It should be read together with service-specific notices and consent information.
2. INFORMATION WE MAY PROCESS
Depending on the features you use, information may include:
- Account and contact details.
- Booking, appointment and service information.
- Health information, symptoms, medical reports and prescriptions you submit for a healthcare service.
- Provider identity, qualification and professional information.
- Support communications.
- Technical, security and usage information where those features are enabled.
- Transaction and payment-reference information.
The exact information collected depends on the feature used. Do not submit information that is unnecessary for your request.
3. PURPOSES AND LAWFUL BASIS
Information may be processed to manage accounts, provide requested services, coordinate bookings, facilitate payments, communicate with users, maintain security, handle complaints and comply with legal obligations.
The lawful basis depends on the particular processing activity. Where consent is required, it should be appropriately obtained. Health information is sensitive and requires particular safeguards and a valid legal basis under applicable law.
4. HEALTH INFORMATION AND CONFIDENTIALITY
Health information is confidential. Access should be limited to authorised people who need it for a legitimate and permitted purpose.
Disclosure may occur where authorised by the individual, required or permitted by law, or otherwise permitted under applicable legal rules.
Sections 26 and 27 of the National Health Act 2014 address confidentiality and certain permitted disclosures of health information.
Do not use another person's account or submit their medical information unless you have the necessary authority, subject to applicable law.
5. SERVICE PROVIDERS AND THIRD PARTIES
Information may need to be shared with an appropriately authorised healthcare professional, participating facility, laboratory, pharmacy or other service partner to provide the service requested.
Payment-related information may be processed by Aystact, Flutterwave or the bank involved in a manual bank-transfer transaction.
Technical hosting and other service providers may process information where necessary to operate the platform.
The actual list of processors, integrations and data-sharing arrangements must be maintained and disclosed as applicable.
6. HOSTING AND INTERNATIONAL TRANSFERS
The platform uses Truehost Nigeria for hosting. The physical or regional location of all production servers, backups, logs and third-party data stores has not yet been confirmed.
Doctora24 must verify the locations and contractual arrangements of relevant providers. Where personal data is transferred internationally, the transfer must comply with applicable Nigerian data-protection law.
This policy does not promise that all information is stored exclusively within Nigeria.
7. RETENTION AND SECURITY
Information should be retained only for as long as reasonably necessary for its purposes, subject to clinical, contractual, accounting, regulatory and other legal obligations.
Appropriate technical and organisational safeguards should protect information against unauthorised access, loss, misuse, alteration or disclosure.
No online service can guarantee absolute security. Users should protect their credentials and report suspected unauthorised access.
Exact retention periods, backup deletion schedules, access controls and incident-response arrangements must be confirmed against the actual application.
8. YOUR RIGHTS
Subject to applicable law, you may have rights to:
- Receive information about processing of your personal data.
- Request access to your personal data.
- Request correction of inaccurate information.
- Request deletion or restriction where legally applicable.
- Object to certain processing.
- Withdraw consent where processing relies on consent.
- Request portability where the legal conditions apply.
- Raise a complaint with the relevant data-protection authority.
Some records may need to be retained where the law permits or requires it.
9. CONTACT AND REQUESTS
Send privacy requests to support@doctora247.com or call 08101837585.
We may need to verify your identity before acting on a request. Do not include unnecessary medical information in ordinary emails.
You may also contact the Nigeria Data Protection Commission through its official channels.
10. CHANGES
This policy may be updated when services, data practices or legal requirements change. The published version should show its latest review date.
This policy must be checked against the actual data flows, vendors, retention settings and security practices before it is represented as a complete compliance statement.
1. WHO WE ARE
Doctora24 Limited operates the Doctora24 platform.
Business address:
No. 25 Chediya Ukku Airport Road, Kano, Nigeria.
Email: support@doctora247.com
Telephone: 08101837585.
This policy explains the intended handling of personal information when you use the platform. It should be read together with service-specific notices and consent information.
2. INFORMATION WE MAY PROCESS
Depending on the features you use, information may include:
- Account and contact details.
- Booking, appointment and service information.
- Health information, symptoms, medical reports and prescriptions you submit for a healthcare service.
- Provider identity, qualification and professional information.
- Support communications.
- Technical, security and usage information where those features are enabled.
- Transaction and payment-reference information.
The exact information collected depends on the feature used. Do not submit information that is unnecessary for your request.
3. PURPOSES AND LAWFUL BASIS
Information may be processed to manage accounts, provide requested services, coordinate bookings, facilitate payments, communicate with users, maintain security, handle complaints and comply with legal obligations.
The lawful basis depends on the particular processing activity. Where consent is required, it should be appropriately obtained. Health information is sensitive and requires particular safeguards and a valid legal basis under applicable law.
4. HEALTH INFORMATION AND CONFIDENTIALITY
Health information is confidential. Access should be limited to authorised people who need it for a legitimate and permitted purpose.
Disclosure may occur where authorised by the individual, required or permitted by law, or otherwise permitted under applicable legal rules.
Sections 26 and 27 of the National Health Act 2014 address confidentiality and certain permitted disclosures of health information.
Do not use another person's account or submit their medical information unless you have the necessary authority, subject to applicable law.
5. SERVICE PROVIDERS AND THIRD PARTIES
Information may need to be shared with an appropriately authorised healthcare professional, participating facility, laboratory, pharmacy or other service partner to provide the service requested.
Payment-related information may be processed by Aystact, Flutterwave or the bank involved in a manual bank-transfer transaction.
Technical hosting and other service providers may process information where necessary to operate the platform.
The actual list of processors, integrations and data-sharing arrangements must be maintained and disclosed as applicable.
6. HOSTING AND INTERNATIONAL TRANSFERS
The platform uses Truehost Nigeria for hosting. The physical or regional location of all production servers, backups, logs and third-party data stores has not yet been confirmed.
Doctora24 must verify the locations and contractual arrangements of relevant providers. Where personal data is transferred internationally, the transfer must comply with applicable Nigerian data-protection law.
This policy does not promise that all information is stored exclusively within Nigeria.
7. RETENTION AND SECURITY
Information should be retained only for as long as reasonably necessary for its purposes, subject to clinical, contractual, accounting, regulatory and other legal obligations.
Appropriate technical and organisational safeguards should protect information against unauthorised access, loss, misuse, alteration or disclosure.
No online service can guarantee absolute security. Users should protect their credentials and report suspected unauthorised access.
Exact retention periods, backup deletion schedules, access controls and incident-response arrangements must be confirmed against the actual application.
8. YOUR RIGHTS
Subject to applicable law, you may have rights to:
- Receive information about processing of your personal data.
- Request access to your personal data.
- Request correction of inaccurate information.
- Request deletion or restriction where legally applicable.
- Object to certain processing.
- Withdraw consent where processing relies on consent.
- Request portability where the legal conditions apply.
- Raise a complaint with the relevant data-protection authority.
Some records may need to be retained where the law permits or requires it.
9. CONTACT AND REQUESTS
Send privacy requests to support@doctora247.com or call 08101837585.
We may need to verify your identity before acting on a request. Do not include unnecessary medical information in ordinary emails.
You may also contact the Nigeria Data Protection Commission through its official channels.
10. CHANGES
This policy may be updated when services, data practices or legal requirements change. The published version should show its latest review date.
This policy must be checked against the actual data flows, vendors, retention settings and security practices before it is represented as a complete compliance statement.