1. Introduction
ANKORA HEALTH LIMITED (“The Company”, “we” “our” “us”) values your privacy and the security of the information you share with us. This Privacy Policy explains how we collect, use, disclose and safeguard the information we obtain from you in relation to your use of our website, and application (“Platform”). This Privacy Policy applies to our website [ www.ankora.health ] and all related sites, mobile applications, services, and tools regardless of how you access or use them.
By using our Platform, you consent to the terms and practices contained in this Privacy Policy and you grant us the right to collect and process your data in accordance with the terms of this Policy. For the purposes of clarity, “User,” “customer,”, or “subscriber,” refers to visitors to our website. “Personal Information,” or “Personal Data,” means any information that identifies or can be used to identify a User, directly or indirectly, including, but not limited to name, email address, mobile number, photograph, or IP address.
4. Sharing your Information With Third Parties
We may sometimes share the information we have collected from you with third parties. These third parties include our affiliates, subsidiaries, partners, third-party vendors and suppliers who render services for us or on our behalf and ourprofessional advisers (such as our auditors, accountants, lawyers, etc.). We may share the information to facilitate the seamless delivery of our services or incompliance with applicable legal requirements and assisting law enforcement agencies by responding to requests for the disclosure of information in accordance with local laws.
5. Cookie Policy
We use cookies to identify you as a User and make your user experience easier, customise our services, content and advertising; help you ensure that your account security is not compromised, mitigate risk and prevent fraud; and to promote trust and safety on our website. Cookies allow our servers to remember IP addresses, date and time of visits, monitor web traffic and prevent fraudulent activities. Our cookies never store personal or sensitive information; they simply hold a unique random reference to you so that once you visit the site we can recognize who you are and provide certain content to you. If your browser or browser add-on permits, you have the choice to disable cookies on our website, however this may impact your experience using our website
6. Governing Principles of Data Processing
We process your information in accordance with the provisions of the Nigeria Data Protection Regulation (NDPR) and these principles:
Your personal data is collected and processed in accordance with specific, legitimate and lawful purpose consented to by you, provided that further processing may be done by archiving the data for public interest, scientific or research purposes, or statistical purposes.
The data collected is adequate, accurate and without prejudice to the dignity of the human person.
The data collected is stored only for the period within which it is reasonably needed.
The data collected is secured against all foreseeable hazards and breaches such as theft, cyber attack, viral attack, dissemination, manipulations of any kind, damage by rain, fire or exposure to other natural elements.
We owe a duty of care to you in respect of the data we have obtained from you.7. Data Security and Protection
To prevent unauthorised access and maintain security against foreseeable hazards, we have in place physical, electronic and managerial procedures to protect, secure and safeguard our customer’s data and ensure accuracy of our records.
We use secure socket layer (SSL) protocol technology for the collection and any permitted transfers of your data. However, the Company cannot guarantee the security of any personal data disclosed to it or collected by it to the extent that it has no control over the public or third-party network through which personal data may be sent to our website.
We have a management and corporate commitment to information security within the organisation and provide clear direction, guidance and responsibilities and procedures in this respect.
We have in place a Data Protection Officer who deals with security of information and personal data together with relevant compliance with the Regulation and the knowledge and skills of our Data Protection Officer are continuously updated.
8. Links to Third Party Websites
We have a management and corporate commitment to information security within the organisation and provide clear direction, guidance and responsibilities and procedures in this respect.
9. Your Privacy Rights
By providing us with your personal information, you have certain rights in accordance with the provisions of the Nigeria Data Protection Regulation which include:
- The right to request for your personal data in our possession,
- The right to object to the processing of your personal data,
- The right to request rectification and modification of Personal Information which we keep, and
- The right to request for the deletion of your personal data in our possession.
To exercise any of the rights listed here, please contact us through the details provided below.
All such requests will be reviewed and considered in accordance with the provisions of the applicable data protection regulations.
You also have the right to opt-out of receiving the informative materials we send to our users by clicking the “Unsubscribe” button found at the bottom of such emails. You also have the right to decline to provide your personal Information when it is requested, however, certain services or all the services may be unavailable to you.
10. International Transfer of your Information
We may need to transfer your information in our possession to third parties outside Nigeria. Such transfers will only be done in accordance with the applicable data protection regulations in such jurisdiction. While undertaking the international transfer of your information, we will put security measures in place to reasonably protect your data during transmission. We shall, among other things, confirm whether the country is on the National Information Technology Development Agency (“NITDA”) White List of Countries with adequate data protection laws.
11. Data Retention Period
We may retain Personal Information about the User, as long as it is necessary for business and/or legal purposes. Also, we may retain aggregated anonymous information indefinitely. In addition, we may retain your information for an additional period as is permitted or required to, among other things, comply with our legal obligations, resolve disputes, and enforce agreements.
All Personal Information shall be destroyed by the Company where possible. For all Personal Data and records obtained, used and stored by the Company, we shall perform periodical reviews of the data retained to confirm the accuracy, purpose, validity and requirement to retain.
The length of storage of Personal Information shall, amongst other things, be determined by:
- The contract terms agreed between the Company and the Data Subject or as long as it is needed for the purpose for which it was obtained; or
- Whether the transaction or relationship has statutory implication or a required retention period; or
- Whether there is an express request for deletion of Personal Data by the Data Subject, provided that such request will only be treated where the Data Subject is not under any investigation which may require the Company to retain such Personal Data or there is no subsisting contractual arrangement with the Data Subject that would require the processing of the Personal Data; or
- Whether the Company has another lawful basis for retaining that information beyond the period for which it is necessary to serve the original purpose.
12. Contact details
If you have questions regarding your data privacy rights or would like to submit a related data privacy right request, please email us at support@ankora.health. Please allow up to 30 days for requests to be processed. The Company reserves the right to charge a reasonable fee to process excessive or repeat requests.
If you have general questions concerning this Privacy Policy, please contact us at support@ankora.health.
We maintain a data breach procedure in order to deal with incidents concerning Personal Information or practices leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Information transmitted, stored or otherwise processed. You may contact our DPO upon becoming aware of any breach of Personal Information or if your access credentials have been compromised, to enable us to take the necessary steps towards ensuring the security of your Personal Information or account.
13. Updates to this Policy
We reserve the right to periodically update and modify the terms of our Privacy Policy without notice. Changes to this Privacy Policy will take effect on the last updated date.