Legal

Privacy Policy

Last updated · August 26, 2026

HEALTHHUB® PRIVACY POLICY

Healthhub Medical Nigeria Limited
Effective Date: 26/08/2026

Healthhub Medical Nigeria Limited (“Healthhub®”, “Healthhub”, “we”, “us” or “our”) is committed to protecting the privacy, security and confidentiality of personal data entrusted to us.

This Privacy Policy explains how we collect, use, process, store, disclose and protect personal data when you visit or use the Healthhub® website and marketplace, create an account, purchase or list products, request quotations, communicate with us, interact with our services, visit our offices, or otherwise engage with Healthhub®.

We process personal data in accordance with applicable Nigerian data-protection laws, including the Nigeria Data Protection Act 2023 (NDPA) and other applicable regulations and directives.

By using our services or providing personal data to us, you acknowledge the practices described in this Privacy Policy. Where consent is the appropriate lawful basis for processing, we will obtain consent as required. You may withdraw consent, subject to any other lawful basis that permits or requires us to continue processing certain information.

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal data processed by Healthhub® relating to individuals who interact with our business, including:

  • Buyers and prospective buyers;

  • Hospitals, clinics, laboratories, diagnostic centres and other healthcare organizations;

  • Suppliers, manufacturers, distributors and their representatives;

  • Biomedical engineers, installers, contractors and service providers;

  • Marketplace users and registered account holders;

  • Customers requesting quotations or product information;

  • Individuals communicating with us through WhatsApp, telephone, email or social media;

  • Website visitors;

  • Employees, applicants, consultants and contractors, where applicable;

  • Business and institutional partners; and

  • Visitors to Healthhub® offices.

The original source similarly defines its privacy policy broadly across clients, partners, employees, contractors and website/office visitors.

2. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with Healthhub®, we may collect information including your name, telephone number, email address, account/login information, organization/company name, job title, delivery or business address, billing information, transaction and order information, product enquiries, quotation requests, supplier information, communications with Healthhub®, customer-service records and information voluntarily submitted through forms or marketplace features.

Where necessary for marketplace transactions, supplier onboarding, regulatory compliance or fraud prevention, we may also collect appropriate business verification, identity or KYC-related information.

When you use our website, we may automatically collect certain technical information, such as your IP address, browser type, device information, pages visited, referring pages, website activity, approximate location information derived from technical data, cookies and similar technologies.

The source policy similarly covers information submitted through forms or service registration, browser/device and usage information, location/traffic data and information supplied through customer-support interactions.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data when you:

  • Create or manage a Healthhub® account;

  • Purchase or enquire about a product;

  • Submit a Request for Quotation (RFQ);

  • Register as a supplier or business partner;

  • Submit products for marketplace listing;

  • Contact Healthhub® through our website;

  • Communicate with us through WhatsApp, telephone, email or social media;

  • Subscribe to marketing communications;

  • Participate in surveys, promotions or campaigns;

  • Apply for employment or engagement with Healthhub®;

  • Visit our office;

  • Enter into an agreement or transaction with us; or

  • Browse or otherwise interact with our website or marketplace.

We may also receive personal data from authorized representatives, suppliers, logistics partners, payment providers, service providers or other parties involved in fulfilling a transaction or service.

4. LAWFUL BASIS FOR PROCESSING

Healthhub® will process personal data only where there is an appropriate lawful basis.

Depending on the circumstances, this may include where:

  • You have provided consent;

  • Processing is necessary to enter into or perform a contract with you;

  • Processing is required to comply with a legal or regulatory obligation;

  • Processing is necessary to protect your or another person's vital interests;

  • Processing is necessary for a task carried out in the public interest where applicable; or

  • Processing is necessary for Healthhub®'s legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms.

These lawful bases follow the framework contained in the supplied policy.

5. HOW HEALTHHUB® USES PERSONAL DATA

We may use personal data to:

  • Create and manage marketplace accounts;

  • Process purchases, orders and transactions;

  • Process payments, invoices and refunds where applicable;

  • Facilitate requests for quotations;

  • Respond to product enquiries;

  • Facilitate communication and transactions involving buyers and suppliers;

  • Verify suppliers and other marketplace participants;

  • Coordinate product inspection, delivery, installation, commissioning, maintenance or other requested services;

  • Provide customer support;

  • Communicate order, delivery or service updates;

  • Prevent fraudulent or unauthorized activities;

  • Maintain marketplace security;

  • Improve our website, marketplace and services;

  • Analyze website and marketplace usage;

  • Personalize relevant user experiences;

  • Maintain business and transaction records;

  • Manage supplier and partner relationships;

  • Send service announcements, security alerts and administrative communications;

  • Conduct marketing where permitted;

  • Recruit and manage employees, consultants or contractors;

  • Comply with applicable legal, regulatory, tax and accounting obligations; and

  • Fulfil other purposes communicated to you at the time the information is collected.

The supplied policy provides for uses such as service provision and improvement, payments and contracts, customer service, analytics, recruitment and communications.

6. PAYMENT INFORMATION

Where you make payments through the Healthhub® marketplace, payment information may be processed by banks, payment processors or other authorized financial-service providers.

Healthhub® may receive transaction-related information necessary to confirm, reconcile, refund or administer payments.

Where a third-party payment provider processes your card or financial information directly, its processing may also be governed by its own privacy and security practices.

7. DISCLOSURE OF PERSONAL DATA

Healthhub® does not sell your personal data.

We may disclose personal data where reasonably necessary to:

  • Suppliers or service providers involved in fulfilling your transaction;

  • Logistics and delivery providers;

  • Payment processors, banks and financial-service providers;

  • Technology, hosting, cloud and cybersecurity providers;

  • Professional advisers such as lawyers, accountants and auditors;

  • Installation, maintenance or biomedical engineering service providers where required for an order;

  • Government, regulatory, law-enforcement or judicial authorities where legally required; or

  • Other third parties where you have authorized or directed the disclosure.

Where service providers process personal data on our behalf, we will take appropriate steps to require them to handle the information in accordance with applicable data-protection requirements and appropriate confidentiality and security obligations.

The supplied policy likewise permits disclosure to trusted processors, legal/regulatory authorities and parties where the individual has consented or directed the disclosure.

8. BUYER AND SUPPLIER INFORMATION

Healthhub® operates a healthcare procurement marketplace and may process information relating to buyers, suppliers and marketplace transactions.

Information will be disclosed between parties only to the extent reasonably necessary to facilitate legitimate marketplace operations, order fulfilment, installation, logistics, payment administration, regulatory compliance or other authorized purposes.

Commercially confidential information—including supplier pricing arrangements, internal commissions and other non-public commercial information—will be handled in accordance with Healthhub®'s applicable policies and agreements.

9. COOKIES AND TRACKING TECHNOLOGIES

Healthhub® may use cookies and similar technologies to operate the website, remember user preferences, improve functionality, understand website usage, measure performance and, where applicable, support marketing and advertising activities.

You may control certain cookies through your browser settings and, where provided, Healthhub®'s cookie-preference tools.

Disabling certain cookies may affect some website functionality.

The supplied policy similarly provides for cookies and comparable technologies for user experience and site-usage analysis.

10. DATA SECURITY

Healthhub® takes reasonable and appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, misuse or theft.

Depending on the systems involved, these safeguards may include access controls, password protection, multi-factor authentication, encryption, secure hosting, security monitoring, restricted administrative privileges, staff confidentiality obligations, backups and appropriate cybersecurity procedures.

However, no website, electronic transmission or storage system can be guaranteed to be completely secure.

The supplied policy likewise emphasizes technical and organizational safeguards such as encryption, access controls, multi-factor authentication, testing, logging and employee training.

11. DATA RETENTION

Healthhub® will retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing services, completing transactions, maintaining business records and complying with legal, tax, accounting, regulatory or dispute-resolution requirements.

When personal data is no longer required, Healthhub® will take reasonable steps to securely delete, anonymize or otherwise dispose of it, subject to applicable law.

This reflects the retention principle in the supplied policy.

12. INTERNATIONAL DATA TRANSFERS

Some technology, cloud, hosting, analytics, communications or other service providers used by Healthhub® may process or store personal data outside Nigeria.

Where personal data is transferred internationally, Healthhub® will take appropriate measures required by applicable law to ensure that the transfer is lawful and that an appropriate level of protection or safeguards applies.

Such safeguards may include contractual protections and appropriate technical and organizational measures.

The supplied policy specifically addresses overseas processing, associated risks and contractual/security safeguards for international transfers.

13. MARKETING COMMUNICATIONS

Where permitted by applicable law, Healthhub® may send information about products, services, marketplace opportunities, promotions or other relevant updates.

Where consent is required, we will obtain it before sending such communications.

You may unsubscribe or withdraw applicable marketing consent using an unsubscribe mechanism provided in the communication or by contacting Healthhub®.

Administrative communications relating to your account, transaction, security or service may still be sent where necessary.

14. YOUR DATA-PROTECTION RIGHTS

Subject to applicable law and relevant exceptions, you may have the right to:

  • Access personal data Healthhub® holds about you;

  • Rectify inaccurate or incomplete personal data;

  • Request erasure of personal data where appropriate;

  • Restrict processing in certain circumstances;

  • Object to certain processing;

  • Withdraw consent where processing is based on consent;

  • Request data portability where applicable; and

  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC) where you believe your data-protection rights have been violated.

These rights correspond to the data-subject rights set out in the supplied policy.

Some rights may be subject to lawful limitations, including circumstances where Healthhub® is required to retain information to comply with legal obligations, establish or defend legal claims, prevent fraud or complete legitimate transactions.

15. CHILDREN'S PRIVACY

The Healthhub® marketplace is primarily intended for adults and organizations procuring healthcare products and services.

We do not knowingly seek to collect personal data directly from children through marketplace account registration without an appropriate lawful basis or authorization.

If we become aware that children's personal data has been collected inappropriately, we will take reasonable steps to address the matter in accordance with applicable law.

16. DATA BREACHES

Healthhub® will maintain procedures for identifying, assessing and responding to personal-data breaches.

Where a personal-data breach triggers a notification obligation under applicable Nigerian data-protection law, Healthhub® will notify the appropriate regulatory authority and, where legally required, affected individuals within the applicable statutory timeframe.

The supplied policy specifically provides for regulatory notification following qualifying breaches and notification of affected individuals where their rights and freedoms are at risk.

17. THIRD-PARTY WEBSITES AND SERVICES

The Healthhub® website may contain links or integrations involving third-party websites, payment services or other platforms.

Healthhub® is not responsible for the independent privacy practices of third-party websites or services that are not controlled by Healthhub®. Users should review the privacy policies of those services before providing personal information to them.

18. CHANGES TO THIS PRIVACY POLICY

Healthhub® may update this Privacy Policy periodically to reflect changes in our services, business operations, technology or applicable legal requirements.

Where changes are made, we will update the “Last Updated” date displayed at the beginning of this Policy and may provide additional notice where appropriate.

Users are encouraged to review this Privacy Policy periodically. This follows the update mechanism contained in the source policy.

19. CONTACT HEALTHHUB®

If you have questions about this Privacy Policy, wish to exercise your data-protection rights, or have concerns about how Healthhub® handles your personal data, please contact:

Healthhub Medical Nigeria Limited (Healthhub®)
Website: Healthhubmarket.com
Email: privacy@healthhubmarket.com
Telephone: +2349167282000
Office Address: 56B, Moleye Street, off Herbert Macauley Way, Yaba, Lagos