Privacy Policy

Betacare ("Betacare," "we," "us," or "our") respects your privacy and is committed to handling personal data responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices and rights available to you.

This policy applies to visitors and users of the Betacare marketing website (including pages such as Home, Platform, Solutions, About, and Contact), demo request flows, and related communications. If your hospital or clinic enters into a separate agreement to use the Betacare platform (including electronic medical records, hospital operations, billing, patient wallets, analytics, and staff portal features), additional or superseding privacy terms may apply under that agreement. Where this policy and a signed customer agreement conflict regarding platform processing, the customer agreement will generally control for data processed on behalf of that facility.

We process personal data in line with applicable Nigerian data protection law, including the Nigeria Data Protection Act, 2023 ("NDPA") and subsidiary regulations, and with widely recognised principles such as lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

Betacare provides Africa's intelligent healthcare operating system connecting clinical, financial, and patient-experience workflows for hospitals and clinics. Our leadership includes Mubarak Ayanniyi (CEO and Co-founder) and Olawole Oyedele (CTO and Co-founder).

For privacy-related questions, requests to exercise your rights, or complaints about how we handle personal data on this website, contact us using the details below. We will respond within timeframes required by applicable law, and in any event within a reasonable period.

In this policy, "personal data" means information relating to an identified or identifiable natural person. "Sensitive personal data" includes health-related information and other categories recognised under Nigerian law. "Processing" means any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.

"Facility customer" or "customer" means a hospital, clinic, or other healthcare organisation that contracts with Betacare to use our platform. "End user" means an individual who uses the platform under a facility customer's account (for example, clinical or administrative staff). "Patient" or "service user" means an individual whose health or care information may be recorded in a facility customer's systems, including where patients interact with patient-facing features such as wallets or portals enabled by a customer.

We use personal data for the following purposes, depending on what we collect and our relationship with you:

1. To respond to demo requests, contact submissions, and support inquiries, and to schedule conversations about Betacare.
2. To provide, maintain, secure, and improve the marketing website and early-stage lead-management workflows.
3. To deliver, configure, and support the Betacare platform under contract with facility customers, including authentication, role-based access, audit logging, backups, and incident response.
4. To send service-related messages (for example, confirmations, security alerts, or changes to terms or policies).
5. To send marketing communications about Betacare where permitted by law and, where required, based on your consent or legitimate interest with opt-out rights.
6. To analyse aggregated website usage to improve content and user experience.
7. To comply with legal obligations, respond to lawful requests from authorities, and establish, exercise, or defend legal claims.
8. To detect, prevent, and investigate fraud, security incidents, and misuse of our services.

We do not use personal data collected through this marketing site to provide medical advice, diagnosis, or treatment. Clinical decisions remain the responsibility of licensed professionals and facility customers using the platform.

Under the NDPA and related guidance, we rely on one or more of the following legal bases, depending on context:

• Consent: where you opt in to marketing emails, non-essential cookies, or other processing that requires consent under Nigerian law.
• Contract: where processing is necessary to perform a contract with you or a facility customer, or to take steps at your request before entering a contract (for example, evaluating a demo request).
• Legal obligation: where we must retain or disclose data to comply with applicable law, regulation, court order, or regulatory inquiry.
• Legitimate interests: where we have a legitimate interest that is not overridden by your rights, such as securing our systems, understanding B2B interest in our platform, and communicating with prospective facility customers who have expressed interest. You may object to certain processing based on legitimate interests where applicable.
• Vital interests or public interest: in rare cases involving serious threats to life or as required for public health mandates, where permitted by law.

Processing of sensitive personal data, including health data, requires stricter conditions. On the marketing site we generally do not ask you to submit patient health records. If you voluntarily include health information in a free-text message, we will treat it as sensitive data and limit use to handling your inquiry unless a separate lawful basis applies.

We do not sell personal data. We may share personal data in the following circumstances:

• Service providers: trusted vendors who assist us with hosting, email delivery, analytics, customer relationship management, security monitoring, and similar functions, bound by confidentiality and data protection terms appropriate to their role.
• Facility customers: where you are a staff member or patient of a customer, data you provide in the platform is shared with that customer as part of normal service operation.
• Professional advisers: lawyers, auditors, or insurers where necessary and subject to duty of confidentiality.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to continued protection of personal data and notice where required by law.
• Legal and safety: when we believe disclosure is necessary to comply with law, protect rights and safety, or respond to valid legal process.
• With your direction: when you ask us to share information or integrate with a third party at your request.

Because our marketing site is early-stage, form submissions may be reviewed internally by Betacare sales and support personnel. We do not name specific subprocessors on this public page unless we publish a dedicated subprocessor list for enterprise customers; generic categories above reflect our intended approach.

Betacare is based in Nigeria and primarily serves healthcare organisations in Nigeria and across Africa. Your data may be stored or processed in Nigeria. If we or our service providers transfer personal data to other countries, we will implement appropriate safeguards required under the NDPA, such as adequacy decisions, standard contractual clauses, binding corporate rules, or your explicit consent where applicable. You may contact us for more information about safeguards relevant to your data.

We retain personal data only for as long as necessary for the purposes described in this policy, unless a longer period is required or permitted by law. Typical retention practices include:

• Marketing and sales leads: retained while active and for a reasonable period afterward to manage the relationship, unless you opt out or request deletion sooner.
• Website logs and security records: retained for a limited period aligned with security and troubleshooting needs.
• Platform data for facility customers: retained according to the customer agreement, the customer's clinical and financial record policies, and applicable healthcare regulations.
• Legal holds: extended retention where litigation or investigations require it.

When data is no longer needed, we delete or anonymise it in accordance with our internal retention schedule and technical capabilities.

We implement administrative, technical, and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or destruction. Measures may include encryption in transit, access controls, role-based permissions for platform features, logging and monitoring, secure development practices, and staff training.

No method of transmission or storage is completely secure. Facility customers are responsible for configuring roles, training staff, and maintaining device security within their environments. If you believe your interaction with us has been compromised, contact us promptly at support@betacare.com.ng.

Subject to the NDPA and applicable exceptions, you may have the following rights regarding personal data for which Betacare is controller:

• Right to be informed about processing (through notices like this policy).
• Right of access to your personal data and certain processing information.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure in qualifying circumstances.
• Right to restrict processing in certain cases.
• Right to data portability where applicable.
• Right to object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent where processing is consent-based, without affecting prior lawful processing.
• Right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or successor authority.

To exercise rights, email support@betacare.com.ng with sufficient information to verify your identity and describe your request. We may need to decline or limit requests where we act as processor on behalf of a facility customer; in those cases we will redirect you to the customer where appropriate.

If you receive promotional emails about Betacare, you can unsubscribe using the link in the message or by contacting us. Transactional or service messages related to an existing relationship or security may still be sent where permitted by law.

The Betacare marketing website is directed at healthcare organisations and professionals, not at children. We do not knowingly collect personal data from children under the age of 18 through this site without appropriate parental or guardian authority. If you believe a child has provided personal data to us improperly, contact us and we will take appropriate steps to delete it.

Healthcare data is sensitive. Betacare builds tools intended to help licensed facilities manage clinical, operational, and financial workflows responsibly. We expect facility customers to collect patient information lawfully, provide required notices, and use the platform in compliance with professional standards and Nigerian healthcare regulations.

If you are a patient, please direct requests about medical records held by a hospital or clinic to that provider. Betacare will support customers in fulfilling processor obligations where our agreements require.

Betacare may use analytics and product features that assist facilities with operational insights. We do not use marketing-site form data to make solely automated decisions that produce legal or similarly significant effects about individuals without human review, except where permitted by law and disclosed to you.

This website may link to third-party sites or services. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal data to third parties.

We may update this Privacy Policy from time to time to reflect changes in our practices, products, or legal requirements. We will post the updated version on this page with a revised effective date. Material changes may also be communicated by email or prominent notice where appropriate. Continued use of the website after changes become effective constitutes acknowledgment of the updated policy, subject to applicable law.

For privacy questions, rights requests, or complaints, contact:

If you are not satisfied with our response, you may have the right to complain to the Nigeria Data Protection Commission or other competent supervisory authority in Nigeria.