Privacy Policy
Last updated: 14 July 2026
Who we are
HMSi360 (“HMS integrated 360”) provides a hospital management platform to healthcare facilities across Africa. Each hospital that uses HMSi360 is the data controller for its patients’ records; HMSi360 acts as a data processor on the hospital’s behalf.
What we collect
For hospital accounts: names, work contact details, professional registration numbers (e.g. MDCN, PCN) and login records of staff users. For patients: the demographic and clinical information the treating hospital records in the system. For website visitors: standard analytics data (pages visited, approximate location, device type) via Google Analytics.
How data is used
Patient data is used solely to deliver the hospital’s care and administrative workflows — records, appointments, prescriptions, diagnostics, billing and insurance claims. We do not sell data, and we do not use patient records for advertising or model training.
Security
Data is encrypted in transit (TLS). Access is role-based, every sensitive action is written to an audit trail, and each hospital’s data is logically isolated in our multi-tenant architecture.
Legal basis & compliance
HMSi360 is designed to support compliance with the Nigeria Data Protection Act 2023 (NDPA) and comparable frameworks in other African countries. Hospitals remain responsible for obtaining patient consent where required by law.
Data retention & portability
Hospitals can export their records (CSV, FHIR JSON) at any time. On contract termination, we make a full export available and delete production data after a grace period, except where retention is required by law.
Breach notification
We notify affected hospitals without undue delay after becoming aware of a personal-data breach, so they can meet their 72-hour NDPA notification obligations.
Payments
Online payments are processed by Flutterwave. HMSi360 does not store card numbers or bank credentials.
Contact
For privacy requests contact support@hmsi360.com or +234 706 454 0718.