Privacy Policy (NDPA 2023)

Data Controller: Dan Logic Web Solutions (danlogicwebsolutions@gmail.com · 09077329120 / 08114567946).

Role. D-Coramed is an IT marketplace. Independent MDCN-licensed providers are separate data controllers of clinical information they collect during consultations.

What we collect. Account identifiers, verification credentials (MDCN folio, SMOH/HEFAMAA license, CAC RC), banking details for Paystack payouts, booking metadata, and encrypted clinical logs.

Lawful basis (NDPA §25). Consent, contract performance, and legitimate interest for platform integrity and fraud prevention.

Access control. Clinical logs are protected by database row-level security. Only the patient and the assigned provider can access them. Dan Logic administrators are technically blocked from viewing consultation dialogue.

Retention. Clinical records are retained in line with MDCN guidelines; account and payment data as required by CBN and FIRS regulations.

Your rights. Access, rectification, erasure, portability, restriction, and objection under NDPA §34–§40.

Cross-border transfers. Data is hosted on infrastructure meeting NDPA adequacy requirements.

Breach notification. We notify the NDPC and affected users within 72 hours of any qualifying breach.