Privacy Policy

Effective Date:
At GNK Care Solutions Limited, we value the privacy, dignity, and trust of our clients,
employees, and partners. This Privacy Statement explains how we collect, use, store,
and protect personal information in accordance with the Nigeria Data Protection Act
(NDPA 2023) and other applicable data protection laws.

1. Who We Are
   GNK Care Solutions Limited is a registered home-care nursing agency in Nigeria. We
   provide personalized medical and non-medical care to clients in their homes through
   professional nurses, caregivers, and allied health staff.
   As part of our operations, we collect and process personal data to deliver quality
   healthcare and related support services.
2. Personal Data We Collect
   We may collect the following categories of data:

• Client information: Name, address, age, gender, medical history, emergency
  contact details.
• Health data: Treatment plans, medications, doctor instructions, and other
  sensitive medical details (with consent).
• Staff data: Identification, qualifications, contact details, employment history,
  references, and performance information.
• Employment Details (for both staff and caregivers): Job title, department, work
  schedule, payroll and banking details, attendance records, leave information,
  disciplinary history, and background verification results.
• Operational data: Billing, payment records, and service preferences.
• Technical data: Device identifiers, communication records, and security
  monitoring data.

1. Purpose of Data Processing
   We collect and process data for the following purposes:

• To deliver home-care and nursing services to clients.
• To ensure proper staffing, supervision, and quality of care.
• To comply with healthcare regulations and professional standards.
• To communicate with clients, families, and healthcare partners.
• To manage billing, payroll, and administrative records.
• To improve service delivery and maintain safety and accountability.

1. Legal Basis for Processing
   GNK Care Solutions processes personal data based on:

• Consent (for health and medical information).
• Contractual necessity (to deliver care and employment services).
• Legal obligations (compliance with regulatory and health standards).
• Legitimate interest (monitoring performance and ensuring quality care).

1. Data Sharing
   We may share personal data only when necessary and in compliance with NDPA:

• With medical professionals, hospitals, or HMOs directly involved in a client’s
  care.
• With government agencies or regulators when legally required.
• With third-party service providers (e.g., physiotherapists, payroll or IT support)
  under confidentiality agreements.
  We do not sell or trade personal information.

1. Data Security
   We implement strict administrative, physical, and technical safeguards to protect data
   from unauthorized access, loss, misuse, or disclosure.
   Access to sensitive health and personnel data is restricted to authorized personnel only.
2. Data Retention
   We retain personal data only as long as necessary to provide services, comply with legal
   obligations, or resolve disputes.
   After this period, data is securely deleted or anonymized.
3. Your Rights
   Under applicable data protection laws, you have the right to:

• Access your personal data.
• Request correction or deletion.
• Withdraw consent.
• Object to certain processing.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
  Requests can be made to:
  privacy@gnkcaresolutions.com
  contact number:

1. Data Protection Officer (DPO)
   Our appointed DPO oversees compliance and data protection matters:
   Name: Ifeanyi Omeh
   Email: dpo@gnkcaresolutions.com
2. Updates to This Statement
   We may update this Privacy Statement periodically to reflect changes in our practices or
   legal requirements. Updated versions will be published on our website or made
   available upon request.