DATA PROTECTION REGULATIONS

The Nigeria Data Protection Regulation (“NDPR” or “the Regulation”), which came into force on January 25, 2019, regulates the gathering, storing and processing of personal data (regardless of whether data is stored electronically, on paper or on other materials), and protects the rights and privacy of all living individuals (including children). The Regulation applies to natural persons residing in Nigeria or residing outside Nigeria but of Nigeria descent. The NDPR in line with Section 37 of 1999 constitution of the Federal Republic of Nigeria imposes a duty of care in respect of customers, employees, guests, visitors and all other categories of data subjects whose data may be in the custody of a data controller.

We Value Your Privacy

At Eye Foundation Hospital (hereinafter called “SUMMIT HEALTHCARE”), we treat your personal information as private and confidential. We are committed to safeguarding your privacy and ensuring the utmost security during every interaction with us. This Privacy Policy outlines the personal information we collect, how we utilize it, and the measures we take to protect it.

This policy, in conjunction with our Terms and Conditions, establishes the framework for the processing of any personal data collected from you or provided by you to us. We encourage you to carefully read the following to gain insight into our perspectives and practices concerning your personal data and our approach to handling it. By your visit to our website (www.eyefoundationhospital.com) and SUMMIT HEALTHCARE branches, you accept and consent to the practices described in this policy.

Any personal information provided by you to SUMMIT HEALTHCARE will be used with your consent, or when we have another lawful reason. Instances where the processing of personal data is necessary include:

• Fulfillment of contractual obligations.
• Compliance with legal and/or regulatory requirements.
• Protection of your vital interests or those of other natural persons.
• Carrying out activities for significant public interest.
• Pursuing legitimate interests of SUMMIT HEALTHCARE or a third party, ensuring alignment with the requirements safeguarding your personal data.

Data Storage

All personal information you furnish us with is securely stored on our secure servers in protected physical locations and where applicable on cloud infrastructure. This storage delivers uninterrupted services to you, encompassing aspects such as ensuring business continuity. The data we collect from you may be transferred to or stored in cloud locations hosted by globally recognized vendors' data center. Whenever there’s a need to transfer information to other locations, rest assured that we will undertake all essential measures to ensure the secure handling of your data, consistently aligning with the principles outlined in this privacy policy.

Data Retention

We retain your data for the duration necessary to fulfill the purpose(s) for which it was collected. The storage duration is also influenced by legal, regulatory, administrative, or operational necessities. Our retention policy ensures that we only keep information essential for complying with legal and regulatory requests, meeting business and audit requirements, responding to complaints and queries, or addressing disputes and claims that may arise. Data that no longer serves its intended purpose is securely destroyed, following a careful identification process to ensure alignment with the principles for which it was initially collected.

Data Sharing

We refrain from sharing personal information with unaffiliated third parties, except when necessary for our legitimate professional and business needs, to fulfill your requests, and/or as required or permitted by law. Such instances may involve service providers, courts, law enforcement, or regulatory bodies.

Furthermore, Summit Healthcare may disclose specific personal information to external entities working with us or on our behalf for the purposes outlined in this Notice (e.g., providing requested products or services, fulfilling public or legal duties). Notably, SUMMIT HEALTHCARE ensures that the personal information provided is not transferred to third parties for their independent direct marketing purposes.

This information may be shared with authorities, law enforcement, government entities, individuals acting on your behalf, payment recipients, beneficiaries, intermediaries, financial institutions, lenders, security holders, payment service providers, technology providers, support service providers, and similar entities.

Data Subject Rights

A data subject has the right to withdraw consent: you have rights to withdraw your consent for personal data processing as consents to SUMMIT HEALTHCARE anytime throughout the period your personal data stored at SUMMIT HEALTHCARE.

Right of access: rights to access your personal data and request SUMMIT HEALTHCARE for a copy of aforementioned personal data, including requesting the company to disclose the acquisition of your personal data you do not consent to.

Right to rectification: rights to request SUMMIT HEALTHCARE to correct inaccurate data or add incomplete data.

Right to erasure: you have the right to request SUMMIT HEALTHCARE to erase your data for some reason (depending on the circumstances and agreements in place). We may continue to process your information if another legitimate reason for doing so exists.

Right to restriction of processing: you have the right to request SUMMIT HEALTHCARE to suppress the use of your personal data for some reasons e.g. the right to ask us not to process your personal data for marketing purposes.

Right to data portability: you have the right to transfer your personal data maintained by SUMMIT HEALTHCARE to other data controllers or yourself due to some reasons.

Right to object: You have the right to object to your personal data processing due to some reasons.

Privacy policy changes

This policy may be updated ad-hoc to align with changes in the legal, regulatory, and operational landscape, with revised versions automatically applying to you. Any modifications to our Privacy Policy will be promptly posted on this page, and the revised policy takes effect upon posting. You will be notified of any changes made to our privacy policy. We recommend checking this page periodically for updates to stay informed about our policy revisions.