Effective Date: 1 July 2026  |  Nigeria Data Protection Act 2023 (NDPA) Compliant

1. Who We Are

Soul Place Surgery is a private medical practice located at 4A Dep Street, Maitama, Abuja FCT, Nigeria. We are committed to protecting the privacy and confidentiality of our patients and website visitors in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations.

For data protection queries, contact us at: [email protected]

2. Information We Collect

We may collect the following categories of personal data:

• Contact information: name, phone number, email address, postal address
• Medical information: health history, symptoms, current medications, allergies, prior procedures
• Appointment details: consultation preferences, scheduling and booking information
• Billing information: payment records (processed securely through third-party providers)
• Communication records: enquiry forms, messages, and WhatsApp interactions
• Website data: IP address, browser type, and pages visited (via cookies — see Section 8)

We collect only what is necessary for the purposes described in this policy. Please do not send urgent medical information through website forms.

3. How We Use Your Information

We use personal data to:

• Respond to enquiries and schedule consultations
• Provide clinical care, treatment, and follow-up services
• Manage administrative, billing, and patient records
• Comply with legal and professional regulatory obligations
• Send appointment reminders and relevant clinical communications
• Improve the quality of our services and patient experience

We do not sell, rent, or trade your personal information to third parties.

4. Legal Basis for Processing

Under the NDPA 2023, we process personal data on the following lawful bases:

• Performance of a contract: to deliver the clinical and administrative services you have requested
• Legal obligation: to comply with healthcare, financial, and regulatory requirements
• Legitimate interests: to maintain and improve our practice and protect patient safety
• Consent: where you have provided explicit consent (e.g. for photography or marketing)

Special category (clinical) data is processed on the basis of medical necessity and professional healthcare obligations.

5. Sharing Your Information

We may share your information with:

• Clinical staff and practitioners directly involved in your care
• Laboratories, referral hospitals, and specialist consultants
• Payment processors, operating under strict data security agreements
• Regulatory bodies, courts, or law enforcement where legally required
• Emergency services where necessary for your immediate safety

We do not share personal information with third parties for commercial marketing purposes without your explicit consent.

6. Data Retention

Patient records are retained for a minimum of six years following the last interaction, or as required by Nigerian healthcare regulations. Administrative and communications records are retained for two years. After the applicable retention period, data is securely deleted or anonymised.

7. Your Rights Under the NDPA

As a data subject under the Nigeria Data Protection Act 2023, you have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data, subject to clinical record-keeping and legal obligations
• Object to processing in certain circumstances
• Data portability of information you have provided to us
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

Our website uses essential cookies to ensure basic functionality. We may also use analytics cookies to understand how visitors use the site. You can manage cookie preferences through your browser settings. Non-essential cookies are only set with your prior consent.

9. Data Security

We implement appropriate technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration, or loss. All staff with access to patient data are bound by professional confidentiality obligations.

10. International Transfers

Where personal data is processed by service providers located outside Nigeria, we ensure that appropriate safeguards are in place in compliance with NDPA requirements.

11. Changes to This Policy

We may update this Privacy Policy periodically. The current version will always be available on this page, with the effective date shown above. We will notify patients of material changes where required by law.

12. Contact and Complaints

Soul Place Surgery
4A Dep Street, Maitama, Abuja FCT, Nigeria
Phone: +234 815 945 1311
Email: [email protected]

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).