Privacy Policy

Your privacy is fundamental to us. This policy explains how RUAH Medical Services collects, uses, and protects your personal and medical information.

Last Updated: April 2026

Introduction

Welcome to RUAH Medical Services ("we," "our," or "us"). We are committed to protecting the privacy and confidentiality of your personal and medical information. This Privacy Policy describes how we collect, use, store, and disclose information when you visit our website at ruahms.com, use our services, or interact with us in any way.

By accessing our website or using our medical services, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our services and contact us with your concerns.

1. Information We Collect

We collect different types of information in order to provide and improve our services to you:

A Personal Identification Information

  • Full name and date of birth
  • Contact information (phone number, email address, home address)
  • Gender and marital status (where medically relevant)
  • Next of kin or emergency contact details
  • Occupation and employer details (where required for insurance)

B Medical & Health Information

  • Medical history and presenting complaints
  • Laboratory test results and diagnostic reports
  • Ultrasound images and scan reports
  • Vital signs (blood pressure, body weight, BMI, body fat, muscle mass)
  • Current medications and allergies
  • Referring physician or healthcare provider details

C Website & Technical Information

  • IP address and browser type
  • Pages visited and time spent on our website
  • Referring website or search engine
  • Device type and operating system
  • Contact form submissions and inquiries

D Payment Information

  • Payment records for services rendered
  • Insurance or HMO details (if applicable)
  • Receipt and transaction references
Note: We do not store full card numbers or sensitive payment credentials. All payment processing is handled securely.

2. How We Use Your Information

We use the information we collect for the following purposes:

Medical Care

To perform laboratory tests, ultrasound diagnostics, and provide accurate medical results for your healthcare needs.

Patient Management

To schedule and manage appointments, maintain patient records, and track health progress over time.

Communication

To notify you when results are ready, confirm appointments, respond to inquiries, and send health reminders.

Service Improvement

To analyze service usage patterns, improve our website experience, and enhance the quality of care we provide.

Billing & Payments

To process payments, issue receipts, manage HMO or insurance claims, and maintain financial records.

Legal Compliance

To comply with applicable Nigerian healthcare laws, regulations, and lawful requests from regulatory authorities.

3. Data Protection & Security

We take the security of your information seriously. RUAH Medical Services implements multiple layers of protection to safeguard your personal and medical data:

Access Control

Only authorized RUAH Medical Services staff involved in your care have access to your personal and medical records. All staff are bound by strict confidentiality obligations.

Secure Storage

Physical records are stored in locked, secure facilities. Digital records are protected using industry-standard security measures and hosted on secure servers.

Confidentiality Training

All our medical and administrative staff receive regular training on data protection, patient confidentiality, and ethical handling of sensitive medical information.

Regular Audits

We conduct regular internal audits of our data handling practices to ensure we remain compliant with best practices and applicable regulations.

Data Breach Protocol

In the unlikely event of a data breach that may affect your personal information, we will notify you promptly in accordance with applicable Nigerian data protection regulations and take immediate steps to contain and resolve the issue.

4. Information Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

With Your Consent

We may share your information with other healthcare providers (hospitals, specialists, or your personal physician) when you explicitly request us to do so for continuity of care.

Legal Requirements

We may disclose information when required by Nigerian law, court order, or lawful requests from government authorities, including public health reporting obligations for notifiable diseases.

Emergency Situations

In a medical emergency where your life or another person's life is at risk, we may share necessary medical information with emergency responders or hospital staff.

Service Providers

We may engage trusted third-party providers (e.g., secure cloud storage, IT support) who assist us in operating our services. These parties are contractually bound to protect your information and may not use it for any other purpose.

5. Medical Record Retention

We retain your medical records and personal information in compliance with Nigerian healthcare regulations and best medical practice standards:

Record TypeRetention Period
Adult patient medical recordsMinimum 6 years from last visit
Children's medical recordsUntil age 25 or 6 years, whichever is longer
Laboratory test resultsMinimum 5 years
Ultrasound images & reportsMinimum 5 years
Financial & billing records7 years (legal/tax requirements)
Website inquiry / contact forms12 months from submission

6. Your Rights

Under the Nigeria Data Protection Regulation (NDPR) and applicable laws, you have the following rights regarding your personal information:

Right of Access

You have the right to request a copy of the personal and medical information we hold about you at any time.

Right to Rectification

If any of your information is inaccurate or incomplete, you have the right to request that we correct it promptly.

Right to Erasure

In certain circumstances, you may request deletion of your data. Note that some records must be retained for legal and medical obligations.

Right to Object

You may object to the processing of your personal data for marketing or non-essential purposes at any time.

Right to Data Portability

You may request that we provide your personal data in a structured format so you can transfer it to another provider.

Right to Restrict Processing

You may request that we limit how we use your data while a dispute or query about its accuracy is being resolved.

To exercise any of these rights, please contact us using the details in Section 9. We will respond to all requests within 30 days. Identity verification may be required before we can fulfill your request.

7. Cookies & Website Tracking

Our website may use cookies and similar technologies to enhance your browsing experience. Here is how we use them:

You can control or disable cookies through your browser settings. However, disabling cookies may affect the functionality of our website.

8. Children's Privacy

We provide medical services to patients of all ages, including children. When services are provided to minors (under 18 years of age), we require the consent of a parent or legal guardian before collecting or processing their personal and medical information.

Parents and guardians have the right to access, review, and request corrections to their child's medical records. Children's records are held with the highest level of confidentiality and are not shared without appropriate authorisation.

9. Contact Us About This Policy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please do not hesitate to reach out to us:

Organisation

RUAH Medical Services
Victory Event Center
39 Obiwali Road, Rumuigbo
Port Harcourt, Rivers State

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make significant changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Post a notice on our website informing visitors of the changes
  • Where appropriate, notify registered patients via email or SMS

We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes your acceptance of the revised policy.