Privacy Policy
Nonsuch Medicare Limited ("we," "us," or "our") operates the website nonsuchmedicare.com and the Nonsuch Medicare Mobile Application (collectively, the "Digital Platforms"). We are a registered Health Maintenance Organization (HMO) in Nigeria.
This Privacy Policy explains how we collect, use, store, protect, and process personal information in compliance with applicable Nigerian data protection laws and regulations and any other global laws.
Your Rights
You have the following rights regarding your personal data:
The right to be informed.
The right of access.
The right to rectification.
The right to erasure.
The right to restrict processing.
The right to data portability.
The right to object.
Rights relating to automated decision-making and profiling.
To exercise any of these rights, please contact us at info@nonsuchmedicare.com
1. Scope and Access Restrictions
The Nonsuch Medicare Mobile Application is strictly reserved for pre-registered enrollees of Nonsuch Medicare Limited who possess a valid Enrollee ID and are covered under an active Service Level Agreement (SLA) entered into directly with Nonsuch Medicare or through an employer-sponsored healthcare plan.
2. Information We Collect
A. Registered Enrollees
To verify eligibility and provide access to our digital services, we may collect and process the following information:
Full Name
Email Address
Enrollee ID
Gender
Authentication and login records
One-Time Password (OTP) verification records
Account activity information necessary for security and service delivery
Device Permissions
To provide certain application features, we may request access to the following device permissions:
Notifications Permission: Used solely to send important account, security, authentication, service, and healthcare plan updates.
Camera Permission: Requested only when you voluntarily choose to upload a profile photograph, insurance documentation, or other supporting documents through the application.
We do not access these device features without your permission.
B. Prospective Customers
Where an individual is not yet enrolled, we may provide an option to communicate with us through WhatsApp or other approved communication channels.
In such cases, we may collect:
Full Name
Phone Number
Email Address (where provided)
Gender
This information is used solely to respond to enquiries, provide information about our healthcare plans, and facilitate membership registration where requested. Nonsuch Medicare does not store this information within its central application database, and any information exchanged remains within the communication channel used by the prospective customer.
3. How We Use Your Information
We use personal information for the following purposes:
Verifying enrollee eligibility and active coverage.
Authenticating users before granting access to the mobile application.
Delivering OTPs and account-related notifications.
Providing healthcare administration and customer support services.
Maintaining platform security and preventing unauthorized access.
Complying with legal, regulatory, health insurance, and audit obligations.
Responding to enquiries from prospective customers.
Advertising Exclusion
We do not sell, trade, or rent your personal information.
Crucially, any health, medical, or insurance-related information processed through our digital platforms is used strictly for healthcare operations, enrollee administration, claims management, service delivery, account authentication, and application functionality.
Such information is never sold, shared, disclosed, or used for advertising, marketing, behavioral profiling, commercial targeting, or any similar commercial purposes. These privacy commitments form part of our contractual obligations with our enrollees and corporate clients under applicable Service Level Agreements (SLAs).
If you prefer not to use our digital authentication services, you may request manual verification by contacting us at info@nonsuchmedicare.com
4. Data Storage and Security
We maintain secure cloud-based infrastructure designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.
Our security measures include:
Encryption of data in transit and at rest.
Access controls and authentication safeguards.
Secure cloud-hosted storage environments.
Ongoing monitoring and security reviews.
Restricted access to authorized personnel only.
Personal information is stored within secure backend systems and is accessible only to authorized personnel and approved service providers who require access to perform their duties.
5. Third-Party Service Providers
We may engage carefully vetted third-party service providers to support our operations, including:
Cloud hosting services.
Notification delivery services.
Email delivery services.
OTP and authentication services.
Technical support and application maintenance services.
These providers act solely on our instructions and are contractually obligated to maintain the confidentiality and security of all personal information they process.
We do not sell personal information to third parties.
6. International Data Transfers
Some personal information may be processed on secure cloud infrastructure located outside Nigeria.
Where cross-border processing occurs, appropriate technical, organizational, and contractual safeguards are implemented to ensure compliance with applicable Nigerian data protection laws and regulations and to ensure that personal information remains adequately protected.
7. Regulatory Compliance
Nonsuch Medicare Limited shall maintain all registrations, notifications, and filings required under applicable data protection laws.
We comply with:
The National Information Technology Development Agency (NITDA) Act, 2007.
The Nigeria Data Protection Regulation (NDPR).
The Nigeria Data Protection Act (NDPA).
Applicable healthcare, privacy, electronic communications, and data protection regulations in force from time to time.
8. Children's Privacy
Our services are intended for healthcare beneficiaries and enrollees.
We do not knowingly collect personal information directly from children without appropriate authorization from a parent, legal guardian, employer, sponsoring organization, or other authorized representative where required by applicable laws.
9. Account Deletion and Data Retention
You may request deletion of your mobile application account at any time through any of the following methods:
Using the account deletion feature available within the mobile application settings.
Submitting a request through our public account request/deletion portal at Digital Account Request Form
Sending a deletion request from your registered email address to info@nonsuchmedicare.com
Upon receipt of a valid request, we will verify your identity and deactivate your account access within 2 working days.
Application-level account information may be retained for up to twelve (12) months following account deletion for security, audit, fraud prevention, dispute resolution, and regulatory compliance purposes, after which it will be securely deleted or anonymized where appropriate.
Please note that certain healthcare records, insurance claims records, treatment histories, financial records, and Service Level Agreements (SLAs) may be retained for longer periods where required by applicable healthcare regulations, legal obligations, audit requirements, litigation holds, or other legitimate business purposes permitted by law.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal, operational, regulatory, or technological requirements.
Updated versions will be published on our website and, where appropriate, within the mobile application. Your continued use of our services after any update constitutes acceptance of the revised Privacy Policy.
Contact Information
Nonsuch Medicare Limited
Email: info@nonsuchmedicare.com
Phone: +234 807 839 2042
Website: https://nonsuchmedicare.com