Privacy and Data Rights
This notice explains how Ubora One Limited handles personal data on the MedFlow website and how personal data is handled inside MedFlow deployments operated by healthcare organisations.
Roles
For the MedFlow marketing website, Ubora One Limited is the data controller of enquiry and website analytics data. Inside a hospital deployment, the healthcare organisation is the controller of patient data and Ubora One Limited acts as a processor under the agreed contract.
What the website collects
- Details you submit in the demo request or contact forms: name, job title, organisation, work email, telephone or WhatsApp number, country, organisation profile and your stated requirements
- Marketing analytics events such as page views, button clicks, downloads and campaign source — without patient data and without protected health information
- Technical information required to serve the site securely
Why we use it
- To respond to your enquiry and arrange a demonstration
- To understand which pages and materials are useful
- To meet legal, accounting and security obligations
Your rights
- Request access to the personal data we hold about you
- Request correction of inaccurate data
- Request deletion where we have no continuing legal basis to retain it
- Withdraw consent to marketing contact at any time
- Object to processing or request restriction
- Lodge a complaint with the relevant data protection authority
Patient data rights inside a hospital deployment
Patients should contact the healthcare organisation holding their record. MedFlow provides that organisation with the tools to record and fulfil access, correction, restriction and release-of-information requests, and to log every access to a patient record.
Legal framework
- Designed to support compliance with the Nigeria Data Protection Act 2023 and applicable regulations and guidance
- GDPR-aligned data-protection principles for applicable deployments
- HIPAA-aligned safeguards for applicable deployments
Contacting us
Data protection enquiries can be sent to info@itechlab.app. We respond to rights requests within the period required by applicable law.
Customer dependencies
- A named Data Protection Officer and registered address should be confirmed by Ubora One Limited management for publication.
- Retention periods per data category require management sign-off.
MedFlow home — Contact Ubora One Limited