Privacy Policy

Privacy Policy

Update Date: 05/26/2025

At Federal Medical Centre (FMC), Ebute Metta, Lagos, we are committed to maintaining the highest standards of confidentiality and integrity in handling your personal and health-related information. This Privacy Policy outlines how we collect, use, store, and disclose your information, and the rights you have concerning your data.

We encourage all patients, visitors, staff, and users of our services — both in-person and online — to review this policy carefully.

1. Purpose of This Policy

This Privacy Policy is designed to inform you about:

  • What personal and health data we collect
  • Why we collect this information
  • How we use, store, and protect it
  • With whom and under what circumstances we may share it
  • Your rights concerning your personal information

FMC Ebute Metta complies with all applicable Nigerian privacy laws, including the Nigeria Data Protection Regulation (NDPR), and operates in accordance with global best practices for healthcare privacy.

2. Information We Collect

We may collect and process the following types of information:

a. Personal Identifiable Information (PII):

  • Full name
  • Date of birth
  • Gender
  • Contact information (address, phone number, email)
  • Next-of-kin/emergency contact information

b. Health and Medical Information:

  • Medical history
  • Current symptoms and diagnosis
  • Clinical test results
  • Prescriptions and medications
  • Allergies, treatment records, and referrals
  • Insurance details (where applicable)

c. Digital and Website Usage Data:

  • IP address and geolocation
  • Browser type and version
  • Pages visited, time spent, and navigation behavior
  • Device type and operating system
  • Cookies and other tracking technologies (if applicable)

3. How We Use Your Information

We collect your information for legitimate medical and administrative purposes, including:

  • To provide accurate diagnosis, treatment, and follow-up care
  • To manage patient records and healthcare history
  • To facilitate appointment scheduling and patient communication
  • To comply with regulatory reporting requirements
  • For billing and claims processing
  • To improve the quality and efficiency of our healthcare services
  • To conduct internal audits, performance reviews, and training
  • For approved medical research and public health planning (using anonymized data only)

4. Legal Grounds for Processing Data

We only process personal and medical data when we have a legal basis to do so. This includes:

  • Consent: Where you have explicitly agreed to the use of your data
  • Medical necessity: To provide safe and effective healthcare services
  • Legal obligations: To comply with government regulations or court orders
  • Public interest: For matters involving public health and safety

5. Sharing and Disclosure of Information

We will never sell or rent your personal information. Your information may only be shared under the following circumstances:

  • Within FMC Ebute Metta: Among medical personnel directly involved in your care
  • With External Providers: Accredited labs, radiology centers, referral hospitals, or specialists
  • Government and Regulators: As required by law or public health directives
  • IT and Data Processors: Secure and authorized partners who help us manage digital systems, under strict confidentiality agreements

All third-party partners are required to adhere to our data protection standards.

6. Your Rights as a Data Subject

You have the right to:

  • Access the information we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data (where legally applicable)
  • Object or restrict how your data is processed
  • Withdraw consent at any time (where consent was the legal basis for processing)
  • Lodge a complaint with the Nigeria Data Protection Bureau (NDPB) if your rights are violated

To exercise any of these rights, please contact our Medical Records Office or send an email to [Insert Data Protection Officer’s Email].

7. Data Security Measures

We use a combination of physical, administrative, and technical safeguards to protect your data, including:

  • Secure medical record systems with user access control
  • Staff training on confidentiality and data protection
  • Encrypted communications and data storage
  • Physical security of file rooms and data centers
  • Regular audits and monitoring for potential data breaches

Despite our efforts, no system can be completely secure. However, we continuously strive to improve our security infrastructure.

8. Use of Our Website and Digital Services

When you use our website or any online service:

  • We may collect cookies to enhance your browsing experience
  • Online forms and portals are encrypted and secure
  • Any third-party links are provided for convenience; we are not responsible for their privacy practices

9. Children’s Privacy

We do not knowingly collect personal information from children without the consent of a parent or legal guardian. Information about minors is handled with the highest sensitivity and only for purposes of medical care or treatment.

10. Retention of Records

We retain your personal and medical records for as long as necessary to provide care and comply with legal and regulatory requirements. After this period, records are securely deleted or archived according to institutional policies and national regulations.

11. Changes to This Privacy Policy

This policy may be updated periodically. All changes will be posted prominently on our website or notice boards within the facility, and the effective date will be revised accordingly. You are encouraged to review the policy regularly.

12. Contact Information

If you have any questions, concerns, or requests related to your personal data or this privacy policy, please contact:

Federal Medical Centre, Ebute Metta, Lagos
📍 Railway Compound, Ebute Metta, Lagos, Nigeria
📞 Phone: +2348170693805, +2348187270749, +2348177623322
📧 Email: fmcebinfo@fmceb.org
🌐 Website: fmceb.org