Health Invest

Introduction
1. Health Invest Partners Africa Limited is a Health Solutions investment company incorporated under the Laws of the Federal Republic of Nigeria.
2. References in this Policy to “we”, “us” or “HealthInvest” are references to Health Invest Partners Africa Limited.
3. Reference in this Policy to “personal data” means any information that identifies, or could reasonably be used to identify, a living individual, either on its own or together with other information.
What Information we collect about you. The personal data that we collect, and process may include:
1. basic information such as name, date of birth, employer, title, relationship affiliations with a person or organization.
2. contact information such as physical address, email address, fax, and phone number(s).
3. background information such as provided by you or collected by us as part of our recruitment or contract employee onboarding processes.
4. confidential information provided to us by or on behalf of our clients or generated by us in the course of providing our products/services.
5. details relating to your visits to our offices or work sites; and/or
6. any other information relating to you which you may provide to us.
How we protect your personal information
1. We are committed to protecting your personal information and implementing appropriate technical and organizational security measures to protect it against any unauthorized or unlawful processing and against any accidental loss, destruction, or damage.
2. Our IT security practices are contained in our Information Security Policy.
How we use your personal data. Whether we obtain your personal data directly from you or from a third party, we will only use your personal data in connection with our professional activities (including the fulfillment of our contractual or legal/regulatory obligations). These “Authorized Uses” include:
1. providing professional services to our clients.
2. managing our business relationship with our service providers and/or vendors, whether in connection with the delivery or procurement of goods and services or as your employer or former employer, including processing payments, accounting, billing, human resource management and related services.
3. acting in compliance with our legal obligations or in obedience to a valid court order.
4. In furtherance of your vital interest.
5. To grant you access to our offices and online platforms.
6. Any other purpose within our legitimate interest.
How your personal data is obtained. We often obtain and process your personal data:
1. In the course of our recruitment or employee onboarding processes.
2. Following an employment, service contract, or any other contractual obligation we have with you.
3. When you are bidding to become our vendor/service provider.
4. When you email us or contact us via our website, social media platforms or subscribe to any of our products and services/newsletters.
5. When you physically visit any of our premises.
Sharing your personal data
1. Your personal data may be shared with our related entities and affiliates. Our related entities and affiliates ensure a corresponding level of data protection. Where we share your personal data with third parties, we will do this in accordance with the Nigeria Data Protection Act 2023 (NDPA), observing appropriate safeguards.
Marketing
1. We would like to send you information about our products, services and special offers which may be of interest to you. Where we have your consent or it is in our legitimate interests to do so, we may do this by post, email, telephone, text message (SMS) or call. We will only ask whether you would like us to send you marketing messages when you tick the relevant boxes. If you have previously agreed to being contacted in this way, you can unsubscribe at any time by contacting us through our dedicated email, or by using the unsubscribe link in the email.
Retaining your personal data.
1. We will delete your personal data at your say so, or when it is no longer reasonably required for the Authorized purposes (subject to our retention policy) or when you withdraw your consent, provided that we are not legally required or otherwise authorized to continue to hold such data. We may retain your personal data for an additional period to the extent that deletion would require us to overwrite our automated disaster recovery backup systems or to the extent we deem it necessary to assert or defend legal claims or in pursuance of any regulatory, accounting or reporting requirement.
Your rights as a data subject. At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:
1. Rightofaccess – You have the right to request a copy of the information that we hold about you. We, however, retain the right to reasonably charge for repetitive or unreasonably large volumes of requests.
2. Rightofrectification – You have a right to correct data that we hold about you that is inaccurate or incomplete, provided you provide documentary proof or support for the correction.
3. Righttobeforgotten – In certain circumstances, you can ask for the data we hold about you to be erased from our records, subject to our retention policy, applicable laws and reasonable overwrite.
4. Right of portability – You have the right to have the data we hold about you transferred to another organization, provided however that we can provide the personal data to you in a machine-readable format for your transmission to the recipient.
5. Right to object – You have the right to object to certain types of processing such as direct marketing.
6. Right to object to automated processing, including profiling – You also have the right to be subject to the legal effects of automated processing or profiling.
7. Right to judicial review – In the event that HealthInvest refused your request under rights of access, we will provide you with a reason for the refusal. You also have a right to make a complaint to the Nigeria Data Protection Commission (NDPC).
What constitutes consent of a data subject? Consent of a data subject to this Privacy Policy is construed accordingly:
1. Visitors: When you visit our website or online platforms and volunteer your personal information; when you physically visit any of our premises or when you voluntarily attend any of our recorded webinars.
2. Client: When you engage our services and/or sign a service level agreement with us in that regard, subsequent to the disclosure of personal information.
3. Vendor/Supplier: When you approach/engage us for the supply or provision of goods/services.
4. Job Applicant: When you send your application/CV in response to our advertised job offers or a cold email.
Can I find out the personal data that HealthInvest holds about me? HealthInvest, at your request, can confirm what information we hold about you and how it is processed. If HealthInvest does hold any personal data about you, you can request the following information:
1. Contact details of the Data Protection Officer, where applicable.
2. The purpose of the processing as well as the legal basis for processing.
3. If processing is based on the legitimate interest of HealthInvest or a third party, information about those interests.
4. The categories of personal data collected, stored, and processed.
5. Recipient(s) or categories of recipients that the data is/will be disclosed to.
6. If we intend to transfer the personal data to a third party or international Organisation, information about how we ensure this is done securely. We will ensure the recipient is in a country on NDPC’s Adequacy list. Where the recipient is in a country outside NDPC’s adequacy list, we shall ensure the execution of the requisite Data Transfer Agreement (DTA) imposing obligations no less than the NDPA on the recipient of the personal data.
7. How long the data will be stored;
8. Details of your rights to correct, erase, restrict or object to such processing;
9. Information about your right to withdraw consent at any time;
10. How to lodge a complaint with the supervisory authority (NDPC).
11. Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
12. The source of personal data, where same was not collected directly from you.
13. Any details of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.
What forms of ID will I need to provide for a DSAR? HealthInvest accepts the following forms of ID (but not limited to) when information on your personal data is requested:
1. Driver’s license.
2. National Identity Card.
3. Permanent Voters Card.
Dispute Resolution If you have any complaints regarding our compliance with this Privacy Policy, please contact our Data Protection Officer. We will investigate and attempt to resolve complaints and disputes regarding the use and disclosure of personal information within thirty (30) business days in accordance with this Privacy Policy and in accordance with applicable law and regulations.
Compliance with the regulators. This Privacy Policy is in line with the provisions of NDPA. The NDPA describes how data controllers including HealthInvest collect, handle, and store personal data and it applies regardless of whether data is stored electronically, on paper or on other materials.
Contact Us. If you have any questions or suggestions regarding our Privacy Policy, please contact our Data Protection Officer.
Contact details of the Data Protection Officer:
Contact Name: Mercy Okhuegbe
Email: [email protected]

Privacy Policy