1. Introduction
Eleog is a hospital operating system that supports clinical, administrative, financial, operational, and patient-facing workflows. This Privacy Policy explains how personal information may be handled when people visit Eleog websites, request a demo, register a hospital, use Eleog as hospital staff, use My Care, contact support, or otherwise interact with Eleog services.
Eleog is committed to fair, lawful, transparent, and secure handling of personal information. For privacy questions, contact kwinxit@gmail.com or 08145034427.
2. Who This Applies To
- Hospital owners, administrators, management, and staff.
- Doctors, nurses, laboratory, pharmacy, radiology, cashier, and reception teams.
- Patients, authorized family members, guardians, and caregivers.
- Prospective customers, website visitors, and support contacts.
3. Eleog And Hospital Responsibility
Eleog provides software infrastructure. Hospitals may determine what patient information is collected, why it is collected, who can access it, when information is released, and how records are managed. Where applicable, a hospital may act as data controller and Eleog may process data on its behalf.
For information Eleog collects directly for sales, account administration, platform billing, support, security, and product operations, Eleog may act as controller. Nothing in this Privacy Policy transfers ownership of a hospital's patient records to Eleog.
4. Information We May Process
Depending on how Eleog is used, information may include:
- Account and identity details such as name, email, phone, job title, role, department, hospital, and account identifiers.
- Hospital configuration such as hospital name, address, departments, wards, beds, staff structure, services, pricing, and operational settings.
- Patient information such as identity, contact details, MRN, appointments, notes, vitals, allergies, assessments, orders, results, reports, prescriptions, admissions, billing, and follow-up information. Health information is sensitive information.
- Family portal information such as guardian identity, relationship, permissions, released results, prescriptions, bills, appointments, and communications. Family relationship alone does not automatically grant clinical access.
- Payment and billing information such as invoices, amounts, references, payment method, refunds, and reversals. Eleog does not need raw full card credentials for ordinary platform operation unless a supported payment provider separately requires it.
- Technical and security information such as IP address, device, browser, login timestamps, audit events, security logs, error logs, and session information.
5. Why Information Is Processed
- To operate Eleog accounts, access, hospital workflows, medical records, diagnostics, pharmacy, nursing, billing, and management reporting.
- To support My Care, released information, appointments, follow-up, and hospital communications.
- To provide support, onboarding, security, audit trails, abuse prevention, reliability, updates, and legal or contractual compliance.
- Patient medical information is not sold for unrelated advertising.
6. Lawful Basis
Depending on the circumstances, processing may rely on consent, contract, legal obligation, vital interests, legitimate interests, or other lawful bases permitted under applicable Nigerian law. The relevant basis may differ between Eleog account administration and hospital-led clinical care.
7. Sensitive Health Information
Health information is handled with controlled access through the hospital, role permissions, patient relationship, and release state. Eleog does not replace professional medical judgement. Where AI-assisted functionality is available, it must not be treated as an independent diagnosis or prescription.
8. Patient And Family Access
My Care may show released results, prescriptions, bills, appointments, follow-up, and hospital notices. The hospital controls what is released where appropriate. Family access requires authorization, guardian authority, or hospital policy.
10. International Processing
Some infrastructure or service providers may process information outside Nigeria. Eleog uses cautious provider selection and appropriate contractual or legal safeguards where applicable, without claiming a fixed data residency location unless separately confirmed.
11. Security
Eleog uses safeguards such as authenticated access, role-based permissions, hospital isolation, audit logs, server-side authorization, controlled invitations, access revocation, secure communications, monitoring, and backups where configured. No digital system can guarantee absolute security.
12. Retention
Information is retained based on purpose, healthcare record obligations, contract, financial and audit requirements, security, and law. Hospitals may have their own clinical record obligations.
13. User And Data Subject Rights
Subject to applicable law, people may have rights to information, access, rectification, objection, restriction, portability, erasure where applicable, withdrawal of consent, rights concerning automated decision-making, and complaint to the Nigeria Data Protection Commission. Privacy requests may be sent to kwinxit@gmail.com. If a request concerns a hospital medical record, Eleog may direct the requester to the relevant hospital.
14. Children And Dependants
Hospitals may process children's health records through Eleog. Access to those records should rely on appropriate guardian, hospital, or legal authorization.
16. Third-Party Links
Eleog websites or workflows may link to third-party services. Those services are responsible for their own privacy practices.
17. Data Incidents
If Eleog becomes aware of a data incident, it will investigate and take appropriate action under applicable legal and contractual obligations.
18. Policy Changes
Eleog may update this Privacy Policy. The latest version remains published online, and material changes may be communicated appropriately.
19. Contact
Eleog Support: kwinxit@gmail.com, 08145034427, website eleog.com.