Privacy Policy

1. Data Controller & Governance

Platform ownership and regulatory framework

The Rural Telemedicine and Digital Health Access Initiative (RTDHAI) is a public-private healthcare platform conceptualized and operated by Gbedako Global Resources Ltd, headquartered in Niger State, Nigeria.

We are committed to maintaining the highest standard of data privacy, clinical confidentiality, and cybersecurity. Our data handling procedures strictly conform to the Nigeria Data Protection Act 2023 (NDPA), regulations enforced by the Nigeria Data Protection Commission (NDPC), the National Health Act, and ethical standards promulgated by the Medical and Dental Council of Nigeria (MDCN).

2. Categories of Information We Collect

Data collected during registration and teleconsultations

Because our initiative serves rural primary health center (PHC) nodes and solar-powered kiosks, patient data is collected in person by authorized Community Health Extension Workers (CHEWs), Nurses, or Medical Officers. We collect:

Demographic Identification

Full Legal Name & Date of Birth / Age
Gender & National Identity (NIN where available)
Residential Village, Ward & Local Government Area (LGA)
Emergency Contact & Kin Information

Clinical & Health Data

Vital signs (Blood pressure, SPO2, Temperature, Heart Rate)
Medical History, Symptoms, Allergies & Diagnoses
Teleconsultation logs (Audio/Video timestamps & clinical notes)
Digital Prescriptions & Medication Dispensing Records

Kiosk & Technical Audit Data

Authorized staff login credentials, user ID, and timestamp logs
Kiosk hardware station IDs, solar power telemetry, and connection metrics
System access logs and record lookup audit trails

3. Purpose & Legal Basis for Data Processing

Why and how your health data is processed

We process personal and medical data under lawful bases recognized by the NDPA 2023, specifically:

Provision of Healthcare Services: To enable real-time clinical teleconsultations between rural health workers and licensed urban medical specialists.
Continuity of Medical Care: Maintaining an Electronic Medical Record (EMR) so that returning patients receive informed, continuous care across visits.
Pharmacy & Prescriptions: Facilitating electronic drug prescriptions and tracking essential medication inventory at spoke kiosks.
Public Health Oversight: Aggregating anonymized epidemiological insights for the State Ministry of Health and primary care agencies.
Legal & Regulatory Compliance: Fulfilling medical recordkeeping obligations enforced by MDCN and the Federal Ministry of Health.

4. Data Security & Encryption Standards

Protections applied to EMR and teleconsultation sessions

RTDHAI employs enterprise-grade technical and organizational safeguards to ensure data protection:

End-to-End Transit Security

All WebRTC teleconsultation video streams and web traffic are encrypted using TLS 1.3 and SRTP protocols to prevent interception.

Encryption at Rest

Patient EMR databases and attachment stores are encrypted using industry-standard AES-256 algorithms.

Role-Based Access Control (RBAC)

Access is strictly segregated by role. CHEWs, Nurses, Doctors, and Admins can only view data authorized for their function.

Immutable Audit Logs

Every record creation, edit, or view event is recorded in tamper-proof audit trails for accountability and security checks.

5. Patient Rights & Contacting our DPO

Your legal rights under the Nigeria Data Protection Act

Under the NDPA 2023, patients have specific rights regarding their personal data, including the right to request access to their medical summaries, request correction of inaccurate demographics, or lodge inquiries with the NDPC.

Data Protection Officer (DPO) Contact Details:

Gbedako Global Resources Ltd / RTDHAI Initiative

Email: dpo@rtdhai.org / info@rtdhai.org

Helpline: +234 (0) 800 RTDHAI (783424)

Location: Head Office, Minna, Niger State, Nigeria

Contact Helpline