Last updated: August 1, 2026
This Privacy Policy explains how the Havilland Clinic IVF EMR mobile application ("the App"), developed and operated by Cavidel Limited ("Cavidel," "we," "us," or "our") on behalf of Havilland Clinic, collects, uses, stores, shares, and protects information when you use the App.
The App is an Electronic Medical Record (EMR) system designed for use by Havilland Clinic staff, clinicians, and authorized personnel to manage patient records related to IVF (in-vitro fertilization) and fertility treatment. It is not intended for use by the general public or by patients directly, unless explicitly enabled by the clinic.
By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this policy.
a) Account and Login Information. When a staff member or authorized user is granted access to the App, we collect their name, email address, phone number, role/designation at the clinic, and login credentials (username and encrypted password).
b) Patient Health Information (Special Category / Sensitive Data). The App is used to record, view, and manage patient medical records, including but not limited to: patient name, date of birth, contact details, medical history, fertility treatment records, diagnostic and laboratory results, prescriptions, appointment and visit history, consultation notes, and other health data entered by clinic staff in the course of treatment. This information is entered and managed by authorized clinic personnel, not directly submitted by patients through the App itself, unless a patient-facing feature is explicitly enabled.
c) Device and Usage Information. We may automatically collect information about the device used to access the App, including device model, operating system version, unique device identifiers, IP address, app version, crash logs, and general usage/diagnostic data to help us maintain and improve the App.
d) Location. The App requests access to your device's location to help pre-fill your address when completing forms within the App and to determine your proximity to Havilland Clinic locations. You may decline or revoke location access at any time through your device settings, though this may limit certain features of the App.
We use the information collected to: provide, operate, and maintain the electronic medical records system for Havilland Clinic; enable authorized staff to create, update, retrieve, and manage patient records securely; support clinical workflows such as appointment scheduling, treatment tracking, and reporting; authenticate users and control access to the App based on role; detect, prevent, and investigate security incidents, fraud, or unauthorized access; maintain audit logs required for clinical and regulatory compliance; improve the performance, reliability, and functionality of the App; and communicate with authorized users regarding updates, support, or account-related matters.
We do not use patient health information for advertising, marketing, or any purpose unrelated to clinical care and clinic operations.
We do not sell patient health information or account data to third parties. We may share information in the following limited circumstances:
Within Havilland Clinic: with authorized clinical and administrative staff who require access to perform their duties.
Service providers: with vetted third-party providers who support the App's infrastructure (e.g., cloud hosting, data backup), under contractual obligations to protect the data and use it only for the purposes we specify.
Legal and regulatory requirements: where required by Nigerian law, court order, or regulatory authority, or to protect the rights, safety, or property of Cavidel, Havilland Clinic, or others.
With patient or guardian consent: where a patient or their legal guardian has explicitly consented to the disclosure of their records to a specified third party (e.g., another healthcare provider).
Patient and account data is stored on secure servers with access restricted to authorized personnel only. We apply technical and organizational safeguards including encryption in transit (TLS/SSL), encrypted storage of credentials, role-based access controls, and regular security reviews to protect information against unauthorized access, alteration, disclosure, or destruction.
While we take reasonable steps to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
Data is primarily stored and processed in Nigeria. Where data is transferred outside Nigeria (e.g., for cloud hosting or backup), we take steps to ensure it receives an adequate level of protection consistent with the Nigeria Data Protection Regulation 2019 ("NDPR") and, where applicable, other relevant data protection laws.
We retain patient records and account information for as long as necessary to fulfill the clinical, legal, and regulatory purposes for which they were collected, including any statutory retention periods applicable to medical records in Nigeria. When information is no longer required, it is securely deleted or anonymized.
Subject to applicable law, you (or, in the case of patient data, the patient or their authorized representative) may have the right to: request access to personal or health information held about you; request correction of inaccurate or incomplete information; request deletion of information, subject to legal and clinical record-keeping obligations; object to or request restriction of certain processing activities; and withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
Requests can be made by contacting us at the details in Section 10 below. We may need to verify your identity before fulfilling a request.
The App is intended for use by authorized clinic personnel and is not directed at children. Any patient data relating to minors is entered and managed solely by authorized clinic staff under applicable consent and guardianship requirements, not collected directly from children through the App.
The App itself does not use browser cookies. It may use standard mobile analytics or crash-reporting tools that collect non-identifying diagnostic data (such as app version, device type, and crash logs) to help us maintain app stability and performance.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be posted at this URL with a revised "Last updated" date. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
Cavidel Limited
7B Basheer Shittu Street, Magodo GRA Phase II, Shangisha, Lagos, Nigeria
Email: consultant@cavidel.com
Phone: +234 (0) 906 735 4599
This Privacy Policy is governed by the Nigeria Data Protection Regulation (2019) and other applicable Nigerian laws and regulations. Where any provision conflicts with a mandatory law or regulation, the mandatory provision shall prevail.