Legal

Privacy Policy

Effective date: 26 August 2026. This document explains, in plain terms, how OneCare and Innovastra Limited handle personal and health information.

1. Who We Are

OneCare is a connected healthcare operating platform developed and operated by Innovastra Limited ("Innovastra", "we", "us"), a company registered in Nigeria with offices in Lagos and Abuja. This policy applies to the OneCare website (myonecare.ng) and, where applicable, the OneCare platform used by healthcare organizations and their patients.

2. Scope Of This Policy

OneCare is typically deployed by hospitals, clinics and health systems ("Healthcare Providers") to manage clinical and operational data, including patient health information. Where a Healthcare Provider is the data controller for patient information processed within OneCare, that Healthcare Provider's own privacy notice governs how patient data is used, and Innovastra acts as a data processor on their behalf under a separate data processing agreement.

This website policy specifically covers information collected through myonecare.ng — for example when you request a demo, contact our sales team, or browse this site.

3. Information We Collect

• Contact details you provide through forms on this site — name, work email, organization, role, telephone number and message content

• Technical information collected automatically — such as browser type, device information and pages visited, used to keep this website secure and functioning correctly

• Any information you choose to share with us directly, such as by email or telephone

4. How We Use Information

• To respond to enquiries and demo requests submitted through this website

• To communicate with healthcare organizations, partners and prospective clients about OneCare

• To maintain the security, performance and reliability of this website

• To comply with applicable legal and regulatory obligations

5. Legal Basis For Processing

Where the Nigeria Data Protection Act 2023 (and its supporting regulations, including the NDPR) applies, we process personal information collected through this website on the basis of your consent (for example, when you submit a contact form) and our legitimate interest in responding to enquiries about our products and services.

6. How We Share Information

We do not sell personal information. We may share information collected through this website with:

• Innovastra Limited staff and contractors who need it to respond to your enquiry

• Service providers who help us operate this website and process form submissions

• Regulators or authorities where required by law

7. Data Retention

We retain information submitted through this website for as long as necessary to respond to your enquiry and maintain a record of the relationship, after which it is deleted or anonymized in line with our internal data retention practices.

8. Your Rights

Subject to applicable law, you may have the right to request access to, correction of, or deletion of personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

9. Security

We apply reasonable technical and organizational measures designed to protect information submitted through this website. No system can be guaranteed completely secure, and we encourage you not to share sensitive personal or health information through the general contact form on this site.

10. Changes To This Policy

We may update this policy from time to time. The effective date at the top of this page reflects the most recent revision.