Privacy Policy

• Information directly provided by users during registration or use of our services
• Healthcare providers and medical institutions connected to our platform
• Payment processors and financial institutions
• Automated technologies such as cookies, analytics tools, and application logs
• Third-party partners and integrations authorized by users

• Creating and managing user accounts
• Providing healthcare-related services and digital tools
• Processing payments and managing health wallets
• Facilitating healthcare access and provider coordination
• Delivering customer support
• Improving our products, systems, and services
• Sending service-related updates and notifications
• Conducting research, analytics, and product development
• Preventing fraud, abuse, and unauthorized access
• Complying with legal, regulatory, and contractual obligations
• Enforcing our terms, policies, and agreements

Where applicable under data protection laws, we process personal data based on one or more of the following legal grounds:

• User consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests
• Protection of vital interests
• Public interest obligations relating to healthcare services

Health-related information is classified as sensitive personal data. Indura Health applies heightened safeguards to protect such information.

We only process health data:

• With user consent;
• Where necessary to provide healthcare-related services;
• To comply with healthcare laws and regulations; or
• As otherwise permitted under applicable law.

Indura Health may use cookies, pixels, software development kits (SDKs), and similar technologies to:

• Improve platform functionality
• Analyze user behavior and engagement
• Store user preferences
• Enhance security
• Deliver personalized experiences

Users may manage cookie settings through their browser or device preferences. Disabling cookies may affect certain platform functionalities.

We may share personal information with:

• Healthcare providers and medical institutions
• Insurance companies and healthcare financing partners
• Payment processors and financial institutions
• Technology vendors and cloud service providers
• Regulatory authorities and law enforcement agencies where required
• Professional advisors, auditors, or legal representatives
• Business partners involved in service delivery

Personal data may be processed or stored outside Nigeria or the user's country of residence where necessary for operational, technical, or service-related purposes. Where international transfers occur, Indura Health will implement reasonable safeguards to ensure that transferred data remains adequately protected in accordance with applicable laws.

We retain personal data only for as long as necessary to:

• Fulfill the purposes described in this Privacy Policy;
• Comply with legal, tax, accounting, and regulatory obligations;
• Resolve disputes;
• Enforce agreements; and
• Maintain operational records.

Retention periods may vary depending on the nature of the information and legal requirements applicable to healthcare and financial records.

Indura Health implements administrative, technical, and organizational safeguards designed to protect personal data from unauthorized access, disclosure, alteration, misuse, or destruction. Security measures may include:

• Data encryption
• Secure servers and cloud infrastructure
• Access controls and authentication systems
• Employee confidentiality obligations
• Routine monitoring and security assessments
• Secure payment processing technologies

Subject to applicable laws, users may have the right to:

• Access their personal data
• Correct inaccurate or incomplete information
• Withdraw consent at any time
• Request deletion of personal data
• Restrict or object to certain processing activities
• Request portability of their information
• Lodge complaints with relevant data protection authorities

Requests relating to personal data rights may be submitted using the contact information provided below.

Indura Health does not knowingly collect personal information from children without appropriate parental or guardian consent where required by law.

If we become aware that a child's information has been collected improperly, we may take steps to delete such information promptly.

Our platform may contain links to third-party websites, applications, or services. Indura Health is not responsible for the privacy practices, security, or content of third-party platforms. Users are encouraged to review the privacy policies of any third-party services they access.

Users may receive promotional, educational, or informational communications from Indura Health. Users may opt out of marketing communications at any time by following unsubscribe instructions or contacting us directly.

Operational or service-related communications necessary for account management or healthcare delivery may still be sent even where marketing preferences are disabled.

Indura Health aims to comply with applicable privacy and data protection laws, including:

• Nigeria Data Protection Act (NDPA)
• Nigeria Data Protection Regulation (NDPR)
• Applicable healthcare confidentiality obligations
• Other relevant regional or international privacy laws where applicable

In the event of a merger, acquisition, restructuring, financing, asset sale, or business transition, personal data may be transferred as part of the transaction, subject to appropriate confidentiality and legal protections.

Indura Health may update or revise this Privacy Policy periodically to reflect operational, legal, or regulatory changes.

Updated versions will be published on our platform with a revised effective date. Continued use of our services after updates constitutes acceptance of the revised Privacy Policy.