KEDI WEBSITE PRIVACY POLICY

KEDI WEBSITE PRIVACY POLICY

 

INTRODUCTION

The privacy of your personal information is important to KEDI Healthcare Industries Nigeria Limited. and its related companies and affiliates (hereinafter referred to collectively as “KEDI Healthcare” the “Company” “we” or “our”) and KEDI Healthcare remains committed to complying with applicable data protection laws, principles, rules and regulations to ensure the security of personal data of our individuals who access and use our website www.kedihealth.com, www.kedishopping.mystagingwebsite.com (referred to as the “Site” or “Website”).

ARTICLE 1: ABOUT THIS POLICY

This Privacy Policy applies to any person who uses our Website (hereinafter referred to as “User” or “you” or “your”) and it explains how we collect, use, disclose, transfer and store your information when you use our Website. Please read this Privacy Policy carefully. By accessing or browsing this Website, you confirm that you have read, understood and agree to this Privacy Policy in its entirety. If you do not agree with the terms of this Privacy Policy, please do not access or use the Website.

This Privacy Policy is subject to the Terms and Conditions of the Website, and this policy is effective from the date and time you access or use this Website.

We reserve the right to update this Privacy Policy from time to time and we will notify you about any changes by updating the “Last updated” date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of this Website after the date such revised Privacy Policy is posted.

ARTICLE 2: PERSONAL INFORMATION/DATA WE COLLECT AND HOLD

As a general rule, we do not collect sensitive information about you.  However, in circumstances where we require sensitive information from you, for example for the purpose of providing our products, healthcare equipment, registration information and other business information to you on the Website (herein collectively referred to as our “Services”), we will seek your consent to collect such sensitive information/data prior to collecting it.

KEDI Healthcare limits information/data collection and usage to information/data that is relevant, adequate and absolutely necessary for carrying out the purpose for which the data is processed.

The type of personal information that we may collect and hold, and where that information comes from, will vary depending on the circumstances in which we are dealing with you. This information may include:

  • Personal data about you such as your name, gender, date of birth, residential and business addresses, telephone numbers, email, demographic information like your zip code or age and other electronic addresses; 
  • Your bank card details that you may provide to us when you place a product order with us or use other Services on our Website;
  • Information that you voluntarily provide to us through your responses to competitions, surveys, search functions, questionnaires, feedback, ratings and reviews;
  • Data and information automatically tracked on the internet. This information includes Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and click stream data. These information does not identify individual users.

We may use the information you give us in the following manner;

  • We use the data automatically tracked by the internet to analyze trends, to administer the Site, to track users’ movements around the Site and to gather demographic information about our user base as a whole to better tailor your Website experience to your interests, administer the site, to track users’ movements around the site and to gather demographic information about our user base as a whole. We do not link this automatically collected data to personally identifiable information;
  • We may use other information that you provide for marketing/promotional communications, for example we may target our marketing communications and personalize your view of our Website to provide you information that may be most relevant to you based on your profile, behaviour and interests, including information about KEDI Healthcare products or our Services;
  • For processing your distributorship registration applications or requests for our products or services, managing those products and services and other relationships and arrangements;
  • For recruitment and staffing purposes;
  • Dealing with complaints; and any other purpose as required by various Nigeria laws which may either expressly, or in effect, require us to collect your personal data;
  • To conduct online surveys, contests or other interactions and to notify you when you win the contest and to award prizes;
  • To perform other business activities as needed.

KEDI Healthcare limits information/data collection and usage to information/data that is relevant, adequate and absolutely necessary for carrying out the purpose for which the data is processed, we will only collect and use your personal data if we have obtained your prior consent or have a lawful and legitimate interest to do so. By clicking on the relevant consent checkboxes in our Website, you unequivocally agree and grant consent to KEDI Healthcare to use, store and process your data for transactional and commercial purpose and send email or any other form of communication to you for marketing purposes or for the purpose of providing our Services to you based on the personal data provided at the time of registration or updated subsequently. You have the right to opt-out or unsubscribe from receiving e-mails or any communication from us by contacting us via our contact details stated in Article 16 and when we receive an opt-out/unsubscribe instruction from you, we will unsubscribe you from that particular communication and any other communications you specifically request.

ARTICLE 3: DATA CONTROLLER/PROTECTION OFFICER

Data Controller means a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed.

For the purpose of this Privacy Policy, KEDI Healthcare is a Data Controller of your data. We also have Data Protection Officer(s) (DPO) responsible for overseeing the Company’s data protection strategy and its implementation to ensure compliance with the Nigerian Data Protection Regulation (2019) requirements. The contact details of the Data Protection Officer are as stated in Article 16 herein.  

ARTICLE 4: USE OF COOKIES AND OTHER TRACKING SYSTEMS

Cookies, log files, and pixel-tags (also called web beacons) or similar electronic tools are technologies that we use to identify you as you move through the website. Your browser allows us to place some information (e.g., session based IDs and/or persistent cookies) on your device that identifies the device you are using. We may use cookies to personalize the website and to track your usage across our other Websites. Unless you voluntarily provide us with your information, our Website will have no way of knowing who you are even if the Website assigns a cookie to your browsing device. The only information a cookie can contain is information which you supply; a cookie cannot read data off your browsing device or your hard drive.

Although cookies do not normally contain personal information, if you have provided your personal information to us, we may associate your registration information with the cookies or other things that the Website places on your device or hard drive. Associating a cookie with your registration data allows us to offer increased personalization and functionality.

You can set your browser to notify you each time a cookie is sent to you or each time a cookie is set on our Website. You can choose to accept or reject the cookies on our Website by clicking on the relevant cookies checkboxes in the Website. If you reject the cookies, the Website, which is cookie-enabled, will not recognize you when you return to the Website, and some functionality may be lost. The help or settings section of your browser will tell you how to prevent your browser from accepting cookies.

ARTICLE 5: ACCURACY OF THE INFORMATION PROVIDED TO US

You declare and guarantee that you are the owner and that you have the necessary rights on the content/information that you transmit to us; and that at the date of its transmission;

  • The content is correct and true;
  • That the use of the content does not contravene any of our policies or the copyright or privacy right of other third parties;
  • That the content is not defamatory (will not be damaging to any third party).

If you do not provide us with personal information we ask for or the information provided is incorrect or incomplete, consequences for you can include, as relevant, that we may not be able to provide you with our Services.

ARTICLE 6: SECURITY OF YOUR INFORMATION

KEDI Healthcare employs reasonable security measures consistent with standard industry practice and Nigerian Data Protection Regulation (2019), for information collected through this Website. We believe that we have ample security measures in place, both physical and electronic to help safeguard your information; help prevent unauthorized access; unauthorized interference; to help maintain data security; and to limit use of your personal data to what is allowed by this Privacy Policy. More so, we have implemented technology and security policies, rules, and other reasonable steps (encryption, passwords, physical security etc.) to protect your personal information from loss, modification, unauthorized access, unauthorized interference, improper use, improper alteration, unlawful or accidental destruction, or accidental loss.

We also use internal protections to limit access to your personal  data to only those employees who need the information to perform a specific job only as is appropriate for the type and scope of the task in question and such employees are forbidden to use such personal data for their own private or commercial purposes or to disclose them to unauthorized persons, or to make them available in any other way; employees are informed of such confidentiality and ethical obligations at the start of the employment and the obligation shall remain in force even after employment has ended.   

Your personal data may be stored in hard copy documents or in electronic form in our computer systems. More specifically, your personal information will be stored in secure sockets layer bit encryption on database servers at our data centres or at data centres owned by third party hosting companies. Your personal data may be transferred to and maintained on computers located outside of your country of residence where the data protection laws may differ than those from your jurisdiction. Your consent to this Privacy Policy represents your agreement to that transfer. KEDI Healthcare will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your personal data will take place to a third party hosting company or a country unless there are adequate controls in place including the security of your data and other personal information.

As required by the law, we take reasonable steps to destroy or de-identify any information or personal data that is no longer required for a permitted purpose.

ARTICLE 7: SERVICE PROVIDERS

We may employ third party companies and individuals (“Service Providers”), to facilitate and provide our Website Services on our behalf, or to assist us in analyzing how our Service is used. These Service Providers have access to your Personal data only to perform these tasks on our behalf and are bound by our confidentiality and ethical obligations not to disclose or use it for any other purpose.

We may provide paid products and/or services within the Service in our Website. In that case, we use third party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their privacy policy. These payment processors adhere to the standards set by Payment Card Industry Data Security Standard to help ensure the secure handling of payment information.

You will be directed to the payment processors we work with at the point of online payment and you can view their privacy policy on the payment processors website.  

ARTICLE 8: DISCLOSURES OF PERSONAL INFORMATION TO THIRD PARTIES

We may disclose your Personal data for the purposes listed above or as otherwise permitted by the law to third parties that include the following:

  • Related entities, commercial partners (including parties with whom we have various types of commercial arrangements) and affiliates. We reasonably ensure that these recipients of such information agree to process such information based on its instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures;
  • Service providers as explained above;
  • Other persons that we need to deal with in connection with engagement of staff (such as training or medical providers, insurers, next-of-kin, referees).

We reserve the right to disclose your personally identifiable information as required by law or by any court or governmental agency and when we believe that disclosure is necessary to protect our rights and/or to comply with a judicial proceeding, court order, or legal process served on our Website. In an effort to respect Users’ privacy, KEDI Healthcare will not otherwise disclose their Personal data to law enforcement, other government officials, or other third parties without a legally valid request, except when KEDI Healthcare believes in good faith that the disclosure of personal data is necessary to prevent imminent physical harm or financial loss or to report suspected illegal activity.

ARTICLE 9: USERS RIGHTS

As a user, you have the following the rights: 

  • Right to request for and access your personal information that we hold about you at any time, subject to certain exemptions under the law;
  • Right to request modification or correction of your personal data/information collected and stored by us;
  • Right to opt-out or unsubscribe from receiving e-mails or any communication from us;
  • Right to request for deletion of your personal information, except as restricted by law or KEDI Healthcare statutory obligations.

We will take all reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete, up-to-date and relevant to our dealings with you and the nature of our relationship with you.

If you would like to request access to your personal information or correction of your personal information held by us, you may contact us in writing. The relevant contact details are provided in Article 16. 

ARTICLE 10: DATA RETENTION

All personal data or information shall be retained, stored and destroyed by KEDI Healthcare in line with relevant Legislative and Regulatory Guidelines. For all personal data and records obtained, used and stored within the Company, KEDI Healthcare shall perform periodical reviews of the data retained to confirm the accuracy, purpose, validity and requirement to retain. To the extent permitted by applicable laws and without prejudice to KEDI Healthcare internal rules on retention, the Company will keep your personal data for the length of the contractual relationship you have with the Company and, to the extent permitted, after the end of that relationship for as long as necessary to perform the purposes set out in this policy. Pursuant to the Nigerian Data Protection Regulation (2019), KEDI Healthcare shall be entitled to retain and process personal data for archiving, scientific research, historical research or statistical purposes for public interest. KEDI Healthcare would forthwith delete personal data in its possession where such personal data is no longer required by KEDI Healthcare, provided no law or regulation being in force requires KEDI Healthcare to retain such personal data.

ARTICLE 11: PRIVACY COMPLAINTS OR DISPUTES

If you believe your personal information has not been treated consistently with this Privacy Policy, please contact us (see Article 16). We will investigate your privacy complaint and respond to you as soon as practicable. We aim to resolve all complaints we find are justified.

ARTICLE 12: LINKS TO OTHER SITES

This Privacy Policy applies strictly only to information collected by this Website. However, certain transaction processing channels may require links to other websites or organizations other than ours. Please note that KEDI Healthcare is not responsible and has no control over websites outside its domain. Such sites are governed by their respective privacy policy and/or terms and conditions and we do not monitor or review the content of other party’s websites which are linked from our Website or media platforms. Opinions expressed or materials appearing on such websites are not necessarily shared or endorsed by us, and KEDI Healthcare shall not be regarded as the publisher of such opinions or materials. Please be aware that we are not responsible for the privacy practices, terms and conditions or content of these sites. We encourage our users to be aware of when they leave our Website and to read the privacy statements of these sites. You should evaluate the security and trustworthiness of any other site connected to our Website or accessed through this Website yourself, before disclosing any personal information to them. KEDI Healthcare will not accept any responsibility for any loss or damage in whatever manner, howsoever caused, resulting from your disclosure to third parties of personal information. If you decide to access linked third party websites, you do so at your own risk and in accordance with the prevailing terms and conditions and privacy policies of third party sites. If you also decide to act on the contents from such third party website posted on this Website, you do so at your own risk and we will not be liable to you for any loss or damages you may suffer as a result of acting on such contents.

ARTICLE 13: DISCLAIMER

While we strive to use industry and commercially acceptable means to protect your personal data, we cannot ensure that all of your private communications and other personal information will never be disclosed in ways not otherwise described in this Privacy Policy. By way of example (without limiting the foregoing), we may be forced to disclose personal information to the government or third parties under certain circumstances, third parties may unlawfully intercept or access transmissions or private communications, or users may abuse or misuse your personal information that they collect from the Website.

KEDI Healthcare will not be held liable for any claims, damages or costs, whether direct or indirect, consequential or special, arising out of or in any way connected to your use or inability to use this Website or any hyperlinked website, or any information or goods that are purchased using this Website, including loss of profits, business interruption, loss of programs or other data, or otherwise. In addition, you agree that we may not be held liable for the conduct of other members associated with this Website, including, but not limited to, activities relating to message boards or chat rooms, or any other services that may be offered in the future. You hereby waive any claims, whether based on contractual, tort or other grounds.

ARTICLE 14: INDEMNITY

You agree to indemnify and hold harmless KEDI Healthcare against any and all claims and expenses, including attorneys’ fees, arising out of or in any way connected to your use of this Website, this expressly includes, without limitation to liability arising from your violation or infringement of any rights of others, including intellectual property rights or libelous or unlawful postings.

ARTICLE 15: GENERAL

  • This Privacy Policy is made pursuant to the Nigeria Data Protection Regulation (2019) and other relevant Nigerian laws, regulations or international conventions applicable to Nigeria. Where any provision of this Policy is deemed inconsistent with a law, regulation or convention, such provision shall be subject to the overriding law, regulation or convention.
  • Before we use or disclose your personal data or information in a manner that is inconsistent with this Privacy Policy, we will give you advance notice and the opportunity to opt out.
  • We may, from time to time, review and update this Privacy Policy including, to take into account new laws, regulations and technology. All personal information that we collect, use, hold and disclose will be governed by the most recent Privacy Policy that has been posted on the Website.
  • This Privacy Policy was last updated in October 2024. Always check back regularly to keep informed of updates to this Privacy Policy.

ARTICLE 16: CONTACTING US ABOUT PRIVACY

If you wish to contact us about the privacy-related matters described above or find out more information about our privacy practices, please use the contact details below:

KEDI Healthcare Industries Nigeria Limited

Regulatory Affairs Manager

kedi.manager@kedihealth.com 

4B, Agbeke Rotinwa Close,

Off Hannat Balogun Street,

Dolphin Estate Extension,

Ikoyi, Lagos, Nigeria.

 

……………………………………………………………………………………………….END……………………………………………………………………………………………………….