Privacy Policy

NurseOnCall provides healthcare services at home, in clinic and online across Port Harcourt and Rivers State. We are the data controller for the information described here. You can reach us at mikesamuel71@gmail.com or 08144347034.

We collect only what we need to deliver care safely and to run the service:

• Identity and contact details — your name, email address, phone number and, for home visits, your address.
• Health information — date of birth, allergies, ongoing conditions, and clinical notes recorded during your care.
• Appointment records — what you booked, when, where, and who attended you.
• Payment records — amounts, dates and the outcome of each transaction. We never receive or store your card number; that is handled entirely by our payment partners.
• Technical information — IP address and browser details, used for security and to investigate problems.

• To provide the care you have booked and to keep clinical records.
• To confirm appointments, send reminders and issue receipts.
• To take payment and process refunds.
• To answer your questions and handle complaints.
• To meet our legal and professional obligations, including record-keeping requirements for clinical care.

We do not sell your data, and we do not use your health information for marketing.

Access is restricted by role. The clinicians treating you see your clinical record; administrative staff see only what their role requires to run your appointment. Every administrative action on a record is written to an audit log showing who did what and when.

We share data outside the organisation only with our payment providers (to take payment), our laboratory partner (to process your samples), and where the law requires it.

Clinical records are retained in line with Nigerian professional record-keeping requirements. Payment and invoice records are retained as long as accounting rules require. When a retention period ends, records are deleted or irreversibly anonymised.

• Passwords are hashed with bcrypt and are never stored or readable.
• Sessions are signed, expire automatically, and can be revoked.
• Access to records is enforced server-side on every request.
• Administrative changes are recorded in an audit trail.
• Repeated failed sign-ins lock an account temporarily.

You can ask us to:

• Give you a copy of the information we hold about you.
• Correct anything inaccurate — much of this you can edit yourself.
• Delete your information, where we are not required to keep it for clinical or legal reasons.
• Stop sending you non-essential messages.

Email mikesamuel71@gmail.com and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission.

We use a single essential cookie to keep you signed in. It contains no advertising or tracking identifiers, and we do not use third-party analytics or advertising cookies.

If we change this policy materially we will tell you before the change takes effect, by email or a notice in your dashboard.