Privacy, clearly explained.

Privacy Policy

Update Date: 05/26/2025

At Federal Medical Centre (FMC), Ebute Metta, Lagos, we are committed to maintaining the highest standards of confidentiality and integrity in handling your personal and health-related information. This Privacy Policy outlines how we collect, use, store, and disclose your information, and the rights you have concerning your data.

We encourage all patients, visitors, staff, and users of our services — both in-person and online — to review this policy carefully.

1. Purpose of This Policy

This Privacy Policy is designed to inform you about:

What personal and health data we collect

Why we collect this information

How we use, store, and protect it

With whom and under what circumstances we may share it

Your rights concerning your personal information

FMC Ebute Metta complies with all applicable Nigerian privacy laws, including the Nigeria Data Protection Regulation (NDPR), and operates in accordance with global best practices for healthcare privacy.

2. Information We Collect

We may collect and process the following types of information:

a. Personal Identifiable Information (PII):

Full name

Date of birth

Gender

Contact information (address, phone number, email)

Next-of-kin/emergency contact information

b. Health and Medical Information:

Medical history

Current symptoms and diagnosis

Clinical test results

Prescriptions and medications

Allergies, treatment records, and referrals

Insurance details (where applicable)

c. Digital and Website Usage Data:

IP address and geolocation

Browser type and version

Pages visited, time spent, and navigation behavior

Device type and operating system

Cookies and other tracking technologies (if applicable)

3. How We Use Your Information

We collect your information for legitimate medical and administrative purposes, including:

To provide accurate diagnosis, treatment, and follow-up care

To manage patient records and healthcare history

To facilitate appointment scheduling and patient communication

To comply with regulatory reporting requirements

For billing and claims processing

To improve the quality and efficiency of our healthcare services

To conduct internal audits, performance reviews, and training

For approved medical research and public health planning (using anonymized data only)

4. Legal Grounds for Processing Data

We only process personal and medical data when we have a legal basis to do so. This includes:

Consent: Where you have explicitly agreed to the use of your data

Medical necessity: To provide safe and effective healthcare services

Legal obligations: To comply with government regulations or court orders

Public interest: For matters involving public health and safety

5. Sharing and Disclosure of Information

We will never sell or rent your personal information. Your information may only be shared under the following circumstances:

Within FMC Ebute Metta: Among medical personnel directly involved in your care

With External Providers: Accredited labs, radiology centers, referral hospitals, or specialists

Government and Regulators: As required by law or public health directives

IT and Data Processors: Secure and authorized partners who help us manage digital systems, under strict confidentiality agreements

All third-party partners are required to adhere to our data protection standards.

6. Your Rights as a Data Subject

You have the right to:

Access the information we hold about you

Correct inaccurate or incomplete data

Request deletion of your data (where legally applicable)

Object or restrict how your data is processed

Withdraw consent at any time (where consent was the legal basis for processing)

Lodge a complaint with the Nigeria Data Protection Bureau (NDPB) if your rights are violated

To exercise any of these rights, please contact our Medical Records Office or send an email to [Insert Data Protection Officer’s Email].

7. Data Security Measures

We use a combination of physical, administrative, and technical safeguards to protect your data, including:

Secure medical record systems with user access control

Staff training on confidentiality and data protection

Encrypted communications and data storage

Physical security of file rooms and data centers

Regular audits and monitoring for potential data breaches

Despite our efforts, no system can be completely secure. However, we continuously strive to improve our security infrastructure.

8. Use of Our Website and Digital Services

When you use our website or any online service:

We may collect cookies to enhance your browsing experience

Online forms and portals are encrypted and secure

Any third-party links are provided for convenience; we are not responsible for their privacy practices

9. Children’s Privacy

We do not knowingly collect personal information from children without the consent of a parent or legal guardian. Information about minors is handled with the highest sensitivity and only for purposes of medical care or treatment.

10. Retention of Records

We retain your personal and medical records for as long as necessary to provide care and comply with legal and regulatory requirements. After this period, records are securely deleted or archived according to institutional policies and national regulations.

11. Changes to This Privacy Policy

This policy may be updated periodically. All changes will be posted prominently on our website or notice boards within the facility, and the effective date will be revised accordingly. You are encouraged to review the policy regularly.

12. Contact Information

If you have any questions, concerns, or requests related to your personal data or this privacy policy, please contact:

Federal Medical Centre, Ebute Metta, Lagos

📍 Railway Compound, Ebute Metta, Lagos, Nigeria

📞 Phone: +2348170693805, +2348187270749, +2348177623322

📧 Email: fmcebinfo@fmceb.org

🌐 Website: fmceb.org