Garima Standard Hospital (GSH) Privacy Policy

Last Updated: February 22, 2026

At Garima Standard Hospital, we recognize that your health information is deeply personal. As a “Data Controller” under Nigerian law, we are committed to processing your data with Fairness, Lawfulness, and Transparency.

1. The Scope of Data Collection

We collect and process personal and sensitive data necessary to provide “Quality Health Care” at our Gesse Phase 1 facility. This includes:

• Bio-Data: Name, date of birth, gender, and home address.
• Contact Information: Phone numbers (e.g., 08035998989) and email addresses.
• Sensitive Health Data: Medical history, blood group, genetic data, and diagnostic results from our Radiology and Laboratory departments.
• Financial Data: Billing details and insurance provider information.

2. Lawful Basis for Processing

In accordance with Section 25 of the NDPA 2023, we process your data based on:

• Consent: Your explicit agreement to undergo treatment.
• Vital Interests: To protect your life in emergency medical situations.
• Legal Obligation: To comply with Nigerian healthcare reporting laws (e.g., National Health Act).
• Public Interest: For public health monitoring and disease control.

3. Your Rights as a Data Subject

Under the NDPA, you have specific rights regarding your information:

• Right to Information: To know how and why your data is being used.
• Right of Access: To request a copy of your medical records.
• Right to Rectification: To correct inaccurate or incomplete health details.
• Right to Erasure (Right to be Forgotten): To request data deletion where legal retention periods have expired.
• Right to Object: To stop the use of your data for non-essential purposes (like marketing).

4. Data Security and Retention

We implement high-level technical and organizational measures (encryption, restricted access, and secure filing) to prevent unauthorized access or data breaches.

• Retention: We store medical records for the duration required by Nigerian medical regulatory bodies. Non-essential data is securely destroyed once its purpose is fulfilled.

5. Third-Party Disclosures

We do not sell your data. We only share information with:

• Specialist Consultants: Within our ENT, Dental, or Orthopedic departments.
• Referral Partners: When transferring care to other specialist hospitals.
• Regulatory Authorities: When required by the Ministry of Health or the NDPC.

6. Contact and Complaints

If you have concerns about your privacy or wish to exercise your rights, please contact our Data Protection Officer (DPO):

Garima Standard Hospital Address: Gesse Phase 1, Birnin Kebbi, Kebbi State. Email: garimastandardhospital@gmail.com Phone: 08035998989 | 070614440109

If you feel your data has been mishandled, you have the right to lodge a formal complaint with the Nigeria Data Protection Commission (NDPC) at info@ndpc.gov.ng.