Overview
This Privacy Policy has been compiled to better serve those who are concerned with how their Personal Data is being used on Lily Hospitals Limited.
Privacy matters to us, so we follow a privacy framework that helps us to manage and protect your information in our medical services, products, and websites.
This Privacy page describes how we collect, use, store, handle and secure personal information (sometimes referred to as “Personal Information”, “Personally Identifiable Information” or “PII) because the Hospital is dedicated to protecting the confidentiality and privacy of information entrusted to us by staff, patients, customers and all stakeholders. This privacy notice sets out our current policies and demonstrates our commitment to privacy
About Us
Lily Hospitals is one of Nigeria’s growing networks of private healthcare institutions with an outstanding reputation for delivering excellent clinical services.
Since our inception under the current management (1998), we have remained at the forefront of providing and delivering quality patient-centered, responsive and technology-driven care across various locations in Nigeria (Warri, Benin and Lagos) to both citizens and foreign nationals. We showcase our extraordinary capabilities in each hub, alongside our internship and residency offerings for resident doctors and interns.
We were the first private hospital in Nigeria to be accredited with the NIS ISO 9001:2015 Certification and one of seven hospitals in Nigeria to have internationally recognized accreditation (COHSASA 2018). In pursuit of our corporate mission, we have also been accredited with ISO 14001:2015.
We are also privileged to be awarded the best private healthcare service provider in Nigeria 2019 and 2022 (Nigerian Healthcare Excellence Awards).
We have continued to push the boundaries with our 40-bed multi specialist center opening soon at Ughelli and the rollout of more affordable care through Lily Primecare outpatient clinics in Warri and its surroundings.
SCOPE
Our Data Protection Policy including this Privacy Notice applies to personal information processed by the Hospital as a data controller and as described in this Notice.
The Data Protection Policy including this Notice explains what information we collect about our customers, how we use that information, who we share it with, the circumstances under which we may share it and what steps are taken to make sure it stays private and secure. The policy also clearly outlines the right of customers in respect of information collected in the course of business.
It is important to know that the policy continues to apply notwithstanding the fact that the agreement between Lily Hospitals and the party using our services ends. It covers every and any service which customers (Private, Corporate, HMO) have with Lily Hospitals.
WHAT WE COLLECT
Lily Hospitals obtains personal information about you if you choose to provide it — for example, to fulfil your request and to provide the requested and/or agreed services. By submitting personal information to Lily Hospitals, you are also acknowledging that Lily Hospitals may use this information in accordance with its Data Protection Policy including this Notice.
Your personal information is not used for purposes other than those listed in this document unless we obtain your permission, or unless otherwise required by law. In general, we collect and generate the following categories of information:
Personal Data : Such as name, surname, ID card number, face image, gender, date of birth, passport number or other identification numbers, Closed circuit television (CCTV) in and around Lily Hospitals facilities (these may collect photos or videos of you).
Contact Data: Such as address, phone number, WhatsApp number, email address etc
Finance Data: Such as billing information, credit or debit information, receipt information, invoice information
Marketing Data: Such as registration information used for subscription and marketing participation, details of the services we offer and your preferences.
Technical Data: Such as IP Address of the computer, type of browser, Cookies information time zone setting, operating system, platform and technology of devices used for accessing the website and Online Appointment System.
Health data: Such as treatment information, reports about physical or mental health conditions, health care of service receivers, laboratory test results, diagnosis, diagnostic disease, information about drug use and drug allergy, history of food allergy, blood result, laboratory result, pathological result, radiological images and radiological report, list of prescribed medication, necessary information for medical services, information of feedback and treatments
OUR LEGAL GROUND FOR DATA COLLECTION
Lily Hospitals generally collects only the personal information necessary to fulfil your request and to provide the requested and/or agreed services. Where additional, optional information is sought, you will be notified of this at the point of collection. The applicable law allows us to process personal information, so long as we have a ground under the law to do so. It also requires us to tell you what those grounds are. As a result, when we process your personal information, we will rely on one of the following processing conditions:
- Performance of a contract: This is when the processing of your personal information is necessary in order to perform our obligations under a contract and also to be able to complete our acceptance procedure so as to enter into a contract;
- Legal obligation or for public interest: This is when we are required to process your personal information in order to comply with a legal obligation, such as keeping records for complying with any tax obligations, or regulatory purposes, or providing information to a public body or law enforcement organization;
- Legitimate interests: where necessary, we may process information about you where there is a legitimate interest for us or a third party with respect to your health interests, except where such interests are overridden by your interests, fundamental rights and freedoms; or you expressly deny them.
- Consent: We may occasionally ask you for specific permission to process some of your personal information for some or more specific purposes such as research and studies, and we will only process your personal information in this way if you so agree.
- What constitutes consent? Your consent is given when you consume our services, navigate our website, tick our online forms or boxes, subscribe to our email alerts, and attend our online/offline events and other events, or when you voluntarily submit your personal data to us.
- How do you withdraw your consent? You may withdraw your consent at any time by unsubscribing to our email alerts or other digital platforms or by contacting the Lily Hospitals Data Protection Officer (DPO) via info@lilyhospitals.net
RETENTION OF INFORMATION
We retain your personal information for as long as we have a relationship with you, subject to applicable laws and regulation. When deciding how long to keep your personal information, we consider our legal and regulatory obligations and internal personal information management policies.
For example, we retain records to investigate or defend against potential legal claims or where required by law. Where we retain data, we do so in accordance with any limitation periods and records retention obligations that are imposed by applicable law. Conversely, we will only retain your personal data for as long as or until such a time that you request and/or exercise your right to deletion/destruction.
STORAGE AND SECURITY OF INFORMATION
We implement and maintain organizational, technical, and administrative security measures designed to safeguard the information we process within our organization against unauthorized access, destruction, loss, alteration, or misuse.
These measures are aimed at providing on-going integrity and confidentiality for your personal information. We evaluate and update these measures on an ongoing basis. Your information is only accessible to personnel who need access to the information to perform their duties, However, while we take precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf.
SHARING INFORMATION
We do not share personal information with unaffiliated third parties, except if necessary for our legitimate professional and business needs, to carry out your requests, and/or as required or permitted by law. These include:
Service providers: Lily Hospitals works with reputable partners and service providers so they can process your personal information on our behalf where required. Lily Hospitals will only transfer personal information to them when they meet our standards set in our policy on the processing of data and security. We only share personal information that allows them to provide their services.
Courts, law enforcement or regulatory bodies: Lily Hospitals may disclose personal information in order to respond to requests of courts, government or law enforcement entities or where it is necessary to comply with applicable laws, court orders or rules, or government regulations.
Audits: Disclosures of personal information may also be needed for data privacy or security audits and/or to investigate or respond to a complaint or security threat.
In addition, Lily Hospitals may transfer certain personal information to external entities working with us or on our behalf for the purposes described in this Notice (e.g. in order to provide you with products or services you requested, or due to public or legal duty to do so). Lily Hospitals will not transfer the personal information you provide to any third parties for their own direct marketing use.
As such information may be transferred and disclosed to authorities, law enforcement, government, persons acting on your behalf, payment recipients, beneficiaries, intermediaries, other financial institutions, lenders and holders of security over any property relevant to Lily Hospitals, payment service providers, technology providers, support service providers, etc.
CHILDREN’S PRIVACY
Please note that our services apply to children irrespective of age. We knowingly collect personally identifiable information from Children under the age of 18, under the strict supervision and consent of the child’s parent, guardian or legal custodian.
COOKIES POLICY
When you visit our website, Lily Hospitals uses cookie to ensure you will receive a good experience from using the company’s website.
A cookie is a small file that stores information and records it on to computer devices or communication tools when you access via web browser you choose while visiting the website.
In some instances, Lily Hospitals and its service providers use cookies and other technologies to automatically collect certain types of information when you visit Lily Hospitals online platforms, as well as through email exchange.
The collection of this information allows Lily Hospitals to customize your online experience, improve the performance and security, usability and effectiveness of Lily Hospitals online presence, and to monitor our overall activities.
We may collect information about your computer or mobile device, including where available operating system and browser type, for system administration or for our own commercial purposes.
Cookies may be placed on your computer or internet-enabled device whenever you visit Lily Hospitals online. This allows the site to remember your computer or device and serves a number of purposes.
Your selection will be saved in a cookie and is valid for a short period. If you wish to revoke your selection, you may do so by clearing your browser’s cookies. Although most browsers automatically accept cookies, you can choose whether or not to accept cookies via your browser’s settings (often found in your browser’s Tools or Preferences menu). You may also delete cookies from your device at any time. However, please be aware that if you do not accept cookies, you may not be able to fully experience some of our web sites’ features.
Cookies by themselves do not tell us your email address or otherwise identify you personally. In our analytical reports, we may obtain other identifiers, but this is for the purpose of identifying the number of unique visitors to our web sites and the geographic origin of visitor trends, and not to identify individual visitors.
Lily Hospitals may also collect and use the geographical location of your computer or mobile device. This location data is collected for the purpose of providing you with information regarding services which we believe may be of interest to you based on your geographic location and to improve our location-based products and services.
By navigating on our web sites and accepting cookies or entering your login details to access areas reserved for registered users, you agree that we can place these cookies on your computer or internet-enabled device.
DATA RIGHTS
As a personal data owner, you have right to request Lily Hospitals to process your personal data according to scope allowed by laws as below
Right to withdraw consent: you have right to withdraw your consent for personal data processing as consents to Lily Hospitals anytime throughout the period your personal data is stored at Lily Hospitals.
Right of access: you have rights to access your personal data and request Lily Hospitals for a copy of the aforementioned personal data, including requesting the company to disclose the acquisition of your personal data you did not give your consent
Right to rectification: you have right to request Lily Hospitals to correct incorrect data or add to incomplete data
Right to erasure: you have rights to request Lily Hospitals to erase your data by some reasons (depending on the circumstances and agreements in place). We may continue to process your information if another legitimate reason for doing so exists.
Right to restriction of processing: you have rights to request Lily Hospitals to suppress the use of your personal data by some reasons e.g the right to ask us not to process your personal data for marketing purposes.
Right to data portability: you have right to transfer your personal data maintained by Lily Hospitals to other data controllers or yourself for some reasons
Right to object: you have right to object to your personal data processing for some reasons
PRIVACY CONCERNS?
If you have questions, requests, or complaints related to your privacy or would like to exercise data protection rights, please contact info@lilyhospitals.net
