Privacy Policy

1. Data controller

ClickResult, operated in Nigeria. Contact: Contact us / info@clickresultapp.ng.

2. Categories of data we process

• Account data — name, email, phone, role, laboratory affiliation.
• Clinical data — test results, specimen metadata, referral records (processed only for healthcare delivery).
• Contact enquiries — messages submitted via the website contact form.
• Device/usage data — IP address, user agent, audit timestamps.

3. Lawful bases

Contract (service delivery), legitimate interest (security, fraud prevention), consent (where explicitly obtained, e.g. marketing), and legal obligation (audit retention).

4. How we use data

• Provide laboratory result delivery, referral routing, and notifications (SMS/USSD/in-app).
• Secure the platform (rate limiting, WAF screening, audit logging).
• Respond to enquiries submitted via Contact.
• Anonymised aggregate analytics (no patient-identifiable data shared externally without consent).

5. Sharing

We do not sell personal data. Sharing is limited to: the laboratory/physician/patient roles involved in a specific result or referral; service providers under contract (e.g. SMS gateway, hosting); and where required by law.

6. Retention

Retention periods are enforced by automated jobs. See the NDPR Compliance page for the live retention table.

7. Your rights

Under NDPR you may request access, rectification, erasure, restriction, portability, and objection. To exercise rights, use the contact form (topic: Patient support) or email info@clickresultapp.ng. We respond within 30 days.

8. Security

TLS in transit, hardened session cookies (HttpOnly/Strict/SameSite=Strict), CSP, WAF screening, and tamper-evident audit chaining. No system is perfectly secure; report concerns to Contact.

9. Contact

Data Protection Officer: via Contact (select any topic) or info@clickresultapp.ng. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).