Privacy Policy

Pearl Oncology Specialist Hospital

Effective Date: 02/2/2026

(“Pearl Oncology,” “we,” “us,” or “our”) is committed to protecting the privacy and security of our patients’ and website visitors’ personal and clinical information, This Policy outlines our practices regarding how we collect, use, store, and safeguard your data when you visit our website or use our services.

Legal Basis for Processing

We process your information under the following legal bases:

A. Consent: Where you have given clear consent for us to process your data for a specific purpose.
B. Contract: For the provision of medical services and treatment.
C. Legal Obligation: To comply with healthcare regulations and statutory medical record-keeping requirements.
D. Vital Interests: Where processing is necessary to protect your life or health in emergencies.

2. Information We Collect

a. Personal and Identifiable Information (PII)

We collect the following information necessary to identify you and manage your care, including:

  • Full name, Date of birth and Gender
  • Contact details (Email address, phone number, residential address).
  • Next of kin or emergency contact information.
  • Payment and insurance billing information.

b. Special Category (Sensitive) Data

As an oncology provider, we process sensitive health data, including:

  • Medical history, diagnostic reports (pathology, imaging), and treatment plans.
  • Genetic or genomic data related to cancer screening and precision medicine.
  • Biometric data for identity verification within clinical systems.

c. Automatically Collected Data

When you visit our digital platforms, we may automatically collect IP addresses, browser types, and usage patterns via cookies to improve site functionality and security.

3. How We Use Your Information

We utilize your data strictly for:

  • Clinical Care: Delivering oncology consultations, treatments, and follow-ups.
  • Coordination: Communicating with your referring physicians or diagnostic labs.
  • Administrative: Managing appointments, billing, and insurance claims.
  • Operational Improvement: Conducting internal audits and quality assessments to enhance patient outcomes.
  • Regulatory Compliance: Reporting to health authorities as required by law

4. Data Sharing and Third Parties

We do not sell or rent your data. Sharing is limited to:

  • Authorized Medical Personnel: Hospital staff involved in your direct care.
  • Service Providers: Trusted partners (e.g., EMR platforms, cloud storage) under strict Data Processing Agreements (DPAs).
  • Legal Necessity: When required by law, court order, or to prevent a public health threat.
  • Research: De-identified or anonymized data may be used for clinical research only with your explicit, separate informed consent.

All third parties are required to maintain confidentiality and data security.

5. Data Security & Sovereignty

We implement “Privacy by Design” principles:

  • Encryption: Data is encrypted both at rest and in transit (SSL/TLS).
  • Access Control: Strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA).
  • Hosting: We prioritize secure, compliant servers and ensure any cross-border data transfers meet NDPA-approved adequacy standards.

6. Data Retention

We retain medical records in accordance with Nigerian health regulations and international clinical guidelines. Generally, records are kept for a minimum of 10 years after the conclusion of treatment, or longer as required by statutory limitation periods.

7. Cookies and Tracking Technologies

Our platforms use cookies to enhance user experience and analyse website traffic. You can choose to disable cookies through your browser settings, though some features of the site may not function properly.

8. Your Rights

You have specific rights regarding your data, subject to clinical and legal overrides: :

  • Request a copy of your medical records.
  • Request updates to inaccurate or incomplete information.
  • Object to certain types of processing (e.g marketing).
  • Request data erasure, provided it does not conflict with our legal obligation to maintain medical records.
  • Withdraw consent at any time for non-essential data processing

9. Third-Party Links

Our website may link to external websites. We are not responsible for the privacy practices or content of those platforms and website encourage you to review their privacy policies separately.

10. Contact Our Data Protection Officer

For any questions, requests to exercise your rights or to report a concern about this Privacy Policy or how your information is handled, please contact:

Data Protection Officer: Pearl Oncology Specialist Hospital

Email: info@pearloncology.com 

Phone: +234 913 047 5177