AfriVacx — Privacy Policy
Effective Date: June 2026
AfriVacx (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.
1. Who We Are
AfriVacx is a digital vaccination facilitation platform operating in Nigeria, registered with the Corporate Affairs Commission (RC Number available upon request). Our registered address is: Abuja, Federal Capital Territory, Nigeria.
2. Information We Collect
We collect the following categories of personal data:
a) Information you provide directly:
• Full name, date of birth, gender
• Contact details: email address, phone number, and home or work address
• Health information: known allergies, medical conditions relevant to vaccination eligibility
• National Identification Number (NIN) or other government-issued ID, where required for vaccine records
• Payment information (processed securely via third-party gateways — we do not store card details)
b) Information collected automatically:
• Browser type, IP address, and device information when you visit our website
• Pages visited, time spent on site, and click activity (via cookies and analytics tools)
3. How We Use Your Information
We use your personal data to:
• Schedule, confirm, and manage your vaccination appointments
• Share relevant health information with your chosen healthcare provider to ensure safe vaccine administration
• Send appointment reminders, follow-up care information, and service updates
• Process payments and issue receipts
• Maintain your vaccination records and generate certificates where applicable
• Improve our platform and services through anonymised analytics
• Comply with legal and regulatory obligations under Nigerian law
4. Legal Basis for Processing
We process your personal data on the following legal grounds under the Nigeria Data Protection Act (NDPA) 2023:
• Contract performance — to deliver the vaccination services you have booked
• Legal obligation — to comply with applicable health and corporate regulations
• Legitimate interests — to improve our services and prevent fraud
• Consent — for marketing communications (you may withdraw consent at any time)
5. Sharing Your Information
We do not sell your personal data. We may share your information with:
• Licensed healthcare providers and clinics that administer your vaccination
• Payment processors to complete transactions securely
• Government health authorities (e.g., NPHCDA) where required by law or national vaccination programmes
• Technology service providers who help us operate our platform, under strict data processing agreements
All third parties we work with are required to handle your data in accordance with Nigerian data protection law.
6. Health Data
Health information is classified as sensitive personal data under the NDPA. We apply additional security measures to this data and only share it with healthcare providers directly involved in your care. You may request that this information be deleted at any time, subject to any legal retention obligations.
7. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Vaccination records may be retained for up to 7 years in line with Nigerian health regulations. You may request earlier deletion where no legal obligation requires retention.
8. Cookies
Our website uses cookies to improve your experience. Cookies help us remember your preferences, analyse site traffic, and personalise content. You can control cookie settings through your browser. Disabling cookies may affect the functionality of certain features.
9. Your Rights
Under the Nigeria Data Protection Act 2023, you have the right to:
• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (‘right to be forgotten’)
• Object to or restrict certain types of data processing
• Withdraw consent for marketing communications at any time
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng
To exercise any of these rights, contact us at legal@afrivacx.com.
10. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. However, no online system is completely secure, and AfriVacx cannot guarantee absolute security.
11. Children’s Privacy
Our platform may be used to book vaccinations for children under the age of 18. In such cases, the parent or guardian is responsible for providing consent and accurate information. We do not knowingly collect personal data directly from children under 13 without verified parental consent.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The most current version will always be available at afrivacx.com/privacy. Significant changes will be communicated to you by email or a prominent notice on our website.
13. Contact Us
For any questions, concerns, or requests related to your privacy:
Email: legal@afrivacx.com
Address: Abuja, Federal Capital Territory, Nigeria
You also have the right to contact the Nigeria Data Protection Commission (NDPC) if you believe your data has been handled unlawfully.