Rapid Diagnostics

Home / Privacy Policy

Privacy Policy

How Rapid Diagnostics collects, uses, protects and retains personal information, framed around the Nigeria Data Protection Act 2023 and guidance issued under it.

Last updated: January 10, 2025

1. Who we are

Rapid Diagnostics provides medical imaging and clinical laboratory services at centres in Gwarinpa, Abuja and Victoria Island, Lagos. For the purposes of the Nigeria Data Protection Act 2023, Rapid Diagnostics is the data controller for the personal information described in this policy.

For any question about this policy, contact admin@rapiddiagnostics.ng.

2. Our processing principles

We aim to handle personal information in line with the principles set out in the Act:

  • Fair, lawful and transparent processing: we tell you what we do with your information and do only what we have a proper basis to do.
  • Purpose limitation: information collected to arrange and deliver your test is used for that, and for directly compatible purposes.
  • Data minimisation: we ask for what the service requires and no more.
  • Accuracy: we take reasonable steps to keep information accurate and correct it when told it is wrong.
  • Storage limitation: we keep information only as long as needed, or as long as the law requires.
  • Integrity and confidentiality: we apply measures intended to protect information against unauthorised access, loss or disclosure.
  • Accountability: we take responsibility for these obligations and for being able to demonstrate how we meet them.

3. Information we collect

Information you give us

  • Appointment requests: name, phone number, email address, preferred centre, service category and test requested, preferred date and time, referring doctor where supplied, and any notes you add.
  • Enquiries: name, contact details and the content of your message, by form, email, telephone or WhatsApp.
  • Patient feedback: any details you choose to give, ratings and comments. Every identifying field on the feedback form is optional and feedback may be given anonymously.
  • Career applications: name, contact details, career area of interest and any supporting information you submit.
  • Insurance and HMO enquiries: provider name, enrollee or member number and authorisation details where you supply them.

Information collected automatically

  • Technical information about your visit, such as device type, browser, approximate location derived from IP address, and pages viewed.

Information created in the course of your care

  • Where you attend for a test we create clinical records including images, laboratory results and reports. These are held under the professional and regulatory obligations applying to medical records, in addition to data protection law.

4. How we use your information

  • To respond to your enquiry and to arrange, confirm and deliver the tests you request.
  • To send preparation instructions relevant to your appointment.
  • To produce and deliver your results, including to a referring doctor where you have asked us to.
  • To review and act on feedback about our service.
  • To consider applications for employment.
  • To maintain accurate clinical and business records.
  • To operate, secure and improve this website.
  • To meet legal, regulatory and professional obligations.

5. Lawful bases

The basis we rely on depends on what we are doing: performing or preparing to perform the service you have asked for; your consent, where we have asked for it, such as optional cookies and permission to contact you about feedback; compliance with a legal obligation; protection of vital interests in an emergency; and our legitimate interests in operating and securing our service, where those are not overridden by your rights.

6. Sensitive and health information

Information about your health is sensitive personal data and is handled with additional care. Access is limited to staff who need it to deliver your care or to meet a legal obligation. Results are released to you, or to a person you have authorised, by the delivery method agreed with you.

We ask patients not to send clinical details, symptoms or results through general web forms or messaging channels. Where clinical information is needed, our team will obtain it directly.

7. Processors and service providers

We use service providers who process personal information on our behalf, including website hosting, email, form handling and IT support. Each acts on our instructions under a contract requiring them to protect the information and to use it only for the purposes we specify.

We also share information with a referring doctor or other clinician involved in your care where you have asked us to or where it is necessary for your treatment, and where we are required to disclose by law or valid legal request. We do not sell personal information.

8. WhatsApp and other third-party channels

We offer WhatsApp as a contact and booking channel because many patients prefer it. WhatsApp is operated by a third party, not by Rapid Diagnostics. When you message us there, your message and phone number are processed through that service under its own terms and privacy policy, which we do not control.

For that reason we ask that clinical details are not sent by WhatsApp. Where you consent to receiving a report through WhatsApp, that delivery carries the same third-party involvement, and you may choose email or in-person collection instead at any time.

9. Cookies and analytics

This website uses cookies. Necessary cookies are required for the site to function. Functional, analytics and any marketing cookies are set only where you have consented, and you can change your choice at any time. Our Cookie Policy explains the categories in more detail.

10. Automated systems and AI

We do not make decisions about your care by automated means without human involvement. Clinical reporting is carried out by qualified professionals.

This website offers a WhatsApp support channel staffed by our team. Should an automated assistant be introduced in future to help with questions about services, preparation, locations, hours, booking or turnaround, it would be limited to those purposes. It would not diagnose, interpret results or images, recommend treatment, or replace a clinician, and this policy would be updated before it went live.

11. Children

We provide diagnostic services to children, and in those cases information is provided and consent given by a parent or legal guardian, in line with the requirements of the Nigeria Data Protection Act 2023.

This website is not directed at children, and we do not knowingly collect information directly from a child through our online forms. If you believe a child has submitted information to us through this website, contact admin@rapiddiagnostics.ng and we will deal with it.

12. Security

We apply technical and organisational measures intended to protect personal information against unauthorised access, loss, alteration and disclosure. These include access controls, staff confidentiality obligations and encryption of data in transit through this website. No method of transmission or storage is entirely secure.

13. Retention

Enquiry, feedback and appointment request records are kept for as long as needed to deal with the matter and to maintain proper business records. Career applications are kept for a defined period for future consideration. Clinical records, including images and laboratory results, are kept for the periods required by the professional and regulatory obligations applying to medical records in Nigeria.

14. International transfers

Where a service provider processes personal information outside Nigeria, we take steps to ensure an adequate level of protection as required by the Nigeria Data Protection Act 2023.

15. Your rights

Subject to the conditions and exceptions in the Act, you have the right to:

  • ask what personal information we hold about you and request a copy;
  • ask us to correct information that is inaccurate or incomplete;
  • ask us to delete information, where we are not required to keep it;
  • object to, or ask us to restrict, certain processing;
  • request that information you provided be transferred to another organisation, where applicable;
  • withdraw consent at any time where we rely on it. Withdrawal does not affect processing carried out beforehand.

To exercise a right, contact admin@rapiddiagnostics.ng. We may need to verify your identity first, particularly where health information is involved.

16. Complaints

If you are concerned about how we have handled your personal information, please contact us first so we can try to put it right. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.

17. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last revised, and where a change is significant we will make that clear on this website.

Scroll to Top