Privacy Policy & NDPR Notice
Last updated: 13 September 2026
AMEX Diagnostics & Genomics (“AMEX”, “we”, “us”) is committed to protecting your privacy and handling your personal and health data lawfully. This notice explains what we collect, why, and your rights under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR).
1. Who we are
AMEX Diagnostics & Genomics operates a health-wallet platform that lets you subscribe to health plans, fund a wallet, book laboratory tests, and view results. We are the data controller for the personal data described in this notice. Questions can be sent to our Data Protection Officer (see “Contact” below).
2. What data we collect
- Identity & contact: name, date of birth, sex, phone number, email, address.
- Identity verification (KYC): National Identification Number (NIN) and any documents you upload.
- Health data (sensitive): test bookings, lab orders, results and related clinical information.
- Financial: wallet balances and transactions, subscription and payment records. Card details are handled by our payment processor — we do not store full card numbers.
- Technical & usage: device and log data, and notification/communication preferences.
3. Legal basis for processing
We process your data on one or more of these lawful bases under the NDPA/NDPR:
- Consent — which you may withdraw at any time (notably for health/sensitive data and marketing).
- Performance of a contract — to provide the services you sign up for.
- Legal obligation — e.g. KYC/AML and record-keeping requirements.
- Legitimate interests — e.g. fraud prevention and service security, balanced against your rights.
4. How we use your data
- Create and secure your account and verify your identity.
- Provide subscriptions, wallet funding, test bookings and delivery of results.
- Process payments and prevent fraud.
- Send transactional notifications (email, SMS, WhatsApp, push) you have opted into.
- Comply with legal and regulatory obligations.
5. Health data
Your health information is sensitive personal data and is treated with additional care. It is shared only with the laboratory/diagnostic partners needed to fulfil your test, and with clinicians where you request it. It is not used for advertising and is never sold.
7. How long we keep it
We keep personal data only as long as needed for the purposes above or as required by law (for example, health and financial records may have statutory retention periods). When no longer needed, data is securely deleted or anonymised.
8. How we protect your data
We use encryption in transit, access controls, audit logging, and least-privilege access for staff. No system is perfectly secure, but we work to protect your data and to notify you and the regulator of any breach as required by law.
9. Your rights under the NDPA/NDPR
Subject to law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure (“right to be forgotten”) where applicable.
- Restrict or object to certain processing.
- Data portability.
- Withdraw consent at any time (without affecting prior lawful processing).
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise any right, contact our Data Protection Officer below.
10. International transfers
Some providers may process data outside Nigeria. Where that happens, we take steps to ensure an adequate level of protection consistent with the NDPA/NDPR.
12. Children
The service is intended for adults (18+). Where care is arranged for a dependant, it must be done by a consenting adult with authority to do so.
13. Changes to this notice
We may update this notice; the “last updated” date shows the latest version. Material changes will be notified in-app or by email.
14. Contact
Data Protection Officer, AMEX Diagnostics & Genomics — privacy@amexdiagnostics.com. You may also complain to the Nigeria Data Protection Commission (NDPC).