Privacy Policy

1. Who we are and how to contact us

CureSync is a healthcare platform being built in Nigeria. It has not launched yet. This website is operated by CureSync Ltd, whose registered address is Abuja, Nigeria. In this policy, “CureSync”, “we” and “us” mean that company.

We decide how and why your personal information is used. Under the Nigeria Data Protection Act 2023, that makes us the data controller for the information described here.

If you have a question about this policy or about your information, write to us at info@curesync.net.

2. What this policy covers

This policy covers this website only: the pages that describe CureSync, and the form where you can join the waitlist as a patient or express interest as a doctor.

It does not cover the CureSync app or any CureSync service for patients, doctors or healthcare providers. Those are not available yet. When the app launches it will have its own privacy notice, which will explain how health information is handled there.

We do not collect health records or medical information through this website. Please do not send us any.

3. What we collect

Information you give us in the form

• Whether you are signing up as a patient or as a doctor.
• Your full name.
• Your email address.
• If you sign up as a doctor, the form also asks for your specialty and your city.

Information you give us if you write to us

If you email us, we receive your email address and whatever you choose to put in your message.

Technical information

Like almost every website, the servers that deliver this site receive some basic technical information with each request, such as your IP address, the date and time, the page requested and the type of browser and device you are using. Our hosting provider, Namecheap, may keep this in server logs for security and troubleshooting.

What we do not collect

We do not ask for health information, payment details, identity numbers or passwords on this website. We do not use cookies, analytics or advertising trackers. Our Cookie Policy has the details.

4. Why we collect it and our legal basis

The Nigeria Data Protection Act 2023 requires us to have a lawful basis for each use of your information. These are ours.

• To tell you when CureSync launches. If you join the waitlist, we use your name and email address to contact you about the launch. Our legal basis is your consent, which you give when you submit the form.
• To contact doctors about onboarding. If you express interest as a doctor, we use your details to reach out with onboarding information before launch. Our legal basis is your consent, which you give when you submit the form.
• To reply to you. If you write to us, we use your details to answer. Our legal basis is our legitimate interest in responding to people who contact us.
• To keep the website secure and working. Technical information is used to deliver the site, fix faults and protect it from misuse. Our legal basis is our legitimate interest in running a safe website.
• To meet legal requirements. We may need to keep or disclose information where Nigerian law requires it. Our legal basis is that legal obligation.

You can withdraw your consent at any time by writing to info@curesync.net. We will then stop contacting you and remove your details from our list.

We do not sell your personal information. We do not use it for advertising. We do not use it to make automated decisions about you.

5. Who we share it with

We share personal information only with the following, and only as far as each needs it.

• Our hosting provider. Namecheap delivers this website, keeps the details you submit through the form in the website’s own database, and receives the technical information described above. The form runs on the website, using WordPress and the Gravity Forms plugin.
• Our email service. Google (Gmail or Google Workspace) sends us a notification email with the details you submit through the form.
• Advisers and authorities. We may share information with our professional advisers, and with regulators, courts or law enforcement where the law requires it or where it is needed to protect our legal rights.
• A new owner. If the business is reorganized or transferred, your information may pass to the new owner, who must keep following this policy. We will tell you if that happens.

Our service providers act on our instructions and may only use your information to provide their service to us.

6. Transfers outside Nigeria

Some of our service providers may store or process information on servers outside Nigeria. Where that happens, we will make sure the transfer meets the requirements of the Nigeria Data Protection Act 2023, for example by sending it only to a destination that offers adequate protection, by putting appropriate contractual safeguards in place, or by asking for your consent.

You can ask us where your information is held by writing to info@curesync.net.

7. How long we keep it

• Waitlist and doctor interest details. We keep these for 36 months after launch, or until you ask us to delete them or withdraw your consent, whichever comes first. After that we delete them or make them anonymous.
• Messages you send us. We keep these only for as long as we need them to deal with your request.
• Technical information. Server logs are kept by our hosting provider for a limited period.

We may keep information for longer where the law requires us to.

8. Your rights

Under the Nigeria Data Protection Act 2023 you have the right to:

• ask whether we hold information about you, and get a copy of it;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use your information, or object to our using it;
• withdraw your consent at any time, which does not affect anything we did before you withdrew it;
• receive the information you gave us in a format you can take elsewhere; and
• complain to the Nigeria Data Protection Commission.

To use any of these rights, including leaving the waitlist, write to info@curesync.net. We may need to confirm who you are before we act. We will reply within the time the law allows.

If you are unhappy with how we have handled your information, we would like the chance to put it right, so please contact us first. You can still complain to the Nigeria Data Protection Commission at any time.

9. Security

We take reasonable technical and organizational steps to protect your information against loss, misuse and unauthorized access. This website is served over an encrypted connection, and access to form submissions is limited to the people who need it.

No website or system can be guaranteed to be completely secure. If there is a breach that is likely to put you at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.

10. Children

This website is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18.

If you believe a child has given us their details, please write to info@curesync.net and we will delete them.

11. Changes to this policy

We will update this policy when what we do changes, for example when the form provider changes or when CureSync launches. Each time, we will change the “Last updated” date at the top of this page.

If a change is significant, we will make it clear on this page and, where appropriate, email the people on our list before it takes effect.

12. Contact

For anything about this policy or your personal information, contact us:

• CureSync Ltd
• Abuja, Nigeria
• info@curesync.net

See also our Cookie Policy and our Terms and Conditions.