Privacy Policy
Effective 15 September 2026. This Privacy Policy explains how LAVAMOZU CONSULT (RC 9808460), operating as LAVAMOZU HEALTH, collects, uses, shares, protects and retains personal data.
- Legal entity
- LAVAMOZU CONSULT
- Registration
- RC 9808460
- Trading name
- LAVAMOZU HEALTH
- Contact
- health@lavamozu.com.ng
1. Payment Information
When you pay through the Platform, we may process information such as: Transaction amount Payment status Transaction reference Payment method Billing information Refund information Where payments are processed through third-party payment providers, those providers may process payment-card or financial information directly. LAVAMOZU HEALTH will not intentionally store complete payment-card details unless there is a lawful and necessary basis for doing so and appropriate safeguards are in place.
2. Technical and Device Information
When you use the Platform, we may automatically receive certain technical information, including: IP address Browser type Operating system Device type Device identifiers Approximate location information where permitted Pages or features accessed Date and time of activity Referring pages Error information Security and authentication logs We use this information primarily to operate, secure, troubleshoot and improve the Platform.
3. Location Information
Certain Services may require location information, for example where necessary for: Home healthcare Delivery services Identifying available providers Appointment logistics Service-area verification Fraud and security purposes Where location information is not essential to the requested Service, we will seek to provide appropriate controls or choices where required by law.
4. Communications
If you contact us, we may retain information relating to the communication, including: Emails Support requests Complaints Telephone records where legally permitted Messages Feedback Service enquiries Other communications Where the Platform provides messaging between Clients and Healthcare Professionals, relevant communications may be processed as part of providing, securing, documenting or managing the requested Service, subject to applicable law.
5. How We Collect Information
We may collect personal information: Directly from you From your use of the Platform From Healthcare Professionals From Pharmacy Partners From payment providers From identity/authentication providers From logistics or delivery providers From authorised representatives From service providers assisting us From other lawful sources Where information is obtained from a third party, we will handle it in accordance with applicable law.
6. Why We Use Your Information
We may process personal data for purposes including: Providing Services — to create and manage your account; process bookings; connect you with appropriate service providers; facilitate healthcare services; manage medication-related services; coordinate deliveries; maintain healthcare records; communicate with you; process payments; and provide customer support. Safety and Security — to detect fraud; prevent abuse; protect accounts; investigate security incidents; protect users and healthcare professionals; and maintain Platform security. Platform Improvement — to troubleshoot technical problems; understand how the Platform is used; improve functionality; develop new services; monitor performance; and conduct legitimate analytics. Legal and Regulatory Compliance — to comply with legal obligations; respond to lawful requests; comply with regulatory requirements; establish or defend legal claims; maintain legally required records; and protect our legal rights.
7. Lawful Basis for Processing
Depending on the circumstances, we may rely on one or more lawful bases recognised under applicable data-protection law, including: Your consent Performance of a contract or steps taken at your request before entering a contract Compliance with a legal obligation Protection of vital interests where legally applicable Performance of a task carried out in the public interest or official authority where applicable Legitimate interests where permitted by law The specific lawful basis may depend on the nature and purpose of the processing. Where consent is the lawful basis, you may generally withdraw that
8. Health Data and Special Categories of Information
Because health information may be subject to enhanced legal protection, we take additional care when collecting, using, storing or disclosing it. We seek to ensure that health information is: Collected for specified and legitimate purposes Limited to what is reasonably necessary Accessible only to authorised persons Protected through appropriate technical and organisational safeguards Retained only for as long as reasonably necessary or legally required Processed in accordance with applicable professional and legal obligations
9. Who May Receive Your Information?
Depending on the Service you request, personal information may be shared with appropriate parties where legally permitted and necessary. Healthcare Professionals — Information necessary for providing the requested healthcare service may be made available to the relevant Healthcare Professional. Pharmacy Partners — Where medication or pharmacy services are requested, relevant information may be provided to the authorised Pharmacy Partner where necessary to fulfil the request. Payment Providers — Transaction information may be shared with payment service providers to process payments, refunds and related transactions. Delivery/Logistics Providers — Where delivery is requested, relevant information such as your name, telephone number and delivery location may be shared as necessary to complete delivery. Technology and Service Providers — We may use trusted third-party service providers for cloud hosting, cybersecurity, communications, analytics, authentication, database infrastructure, technical support, and other services necessary to operate the Platform. These providers will only receive information appropriate to the services they provide and will be subject to applicable contractual and legal requirements.
10. We Do Not Sell Your Health Information
LAVAMOZU HEALTH will not sell your health information. We will not disclose health information to third parties for unrelated commercial purposes without a lawful basis and, where required, your consent. Where advertising or analytics technologies are used, they must be configured so that sensitive healthcare information is not improperly disclosed.
11. Healthcare Professional Confidentiality
Healthcare Professionals using the Platform may have independent professional obligations concerning confidentiality and patient information. Nothing in this Privacy Policy removes or reduces a Healthcare Professional's professional obligations under applicable law or professional regulation.
12. Data Security
We implement reasonable technical and organisational measures appropriate to the risks associated with the information we process, which may include: Access controls Authentication Encryption where appropriate Secure communications Logging and monitoring Backups Security testing Staff confidentiality obligations Vulnerability management Incident-response procedures No electronic system can be guaranteed to be completely secure. You should also protect your password, authentication credentials and device.
13. Data Breaches and Security Incidents
If we become aware of a personal-data breach, we will assess and respond to the incident in accordance with applicable law and our incident-response procedures. Where notification to the NDPC, affected individuals or another authority is legally required, we will make the required notification within the applicable period.
14. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Retention periods may depend on: The nature of the information The type of healthcare service Professional record-keeping obligations Accounting requirements Regulatory requirements Dispute resolution Legal claims Fraud prevention Security requirements Healthcare records may therefore need to be retained for longer than ordinary account information.
15. International Data Transfers
Some technology or service providers used by LAVAMOZU HEALTH may process information outside Nigeria. Where personal data is transferred internationally, we take steps required by applicable law to ensure that the transfer has an appropriate legal basis and suitable safeguards, which may include contractual, technical or organisational safeguards where applicable.
16. Your Data-Protection Rights
Subject to applicable law and relevant exceptions, you may have rights including: The right to know how your information is processed The right to request access to personal information The right to request correction of inaccurate information The right to request deletion where legally applicable The right to object to certain processing The right to request restriction of processing in appropriate circumstances The right to data portability where applicable The right to withdraw consent where consent is the lawful basis Rights relating to automated decision-making where applicable The exercise of a right may be subject to legal limitations.
17. How to Exercise Your Rights
You may submit a privacy/data request by contacting: Data Protection Contact / DPO: [NAME OR TITLE] Email: [PRIVACY EMAIL] Telephone: [●] Postal Address: [●] We may need to verify your identity before processing certain requests. We will respond in accordance with applicable legal requirements.
18. Children and Minors
The Platform may provide certain services involving children or minors. Where the law requires parental or guardian involvement, the appropriate consent and verification procedures must be followed. We will not knowingly process children's personal information unlawfully.
19. Cookies
We may use cookies and similar technologies to operate and improve the Platform, including: Essential cookies Authentication cookies Preference cookies Analytics cookies Advertising/marketing cookies where permitted More information is provided in our separate Cookie Policy.
20. Marketing Communications
Where legally permitted, we may send information about: New Services Platform updates Educational content Promotions Relevant healthcare information Other communications Where consent is required, we will obtain appropriate consent. You may unsubscribe from marketing communications using the available unsubscribe mechanism. Service-related communications, such as appointment confirmations, security alerts and important account notifications, may continue where necessary.