Legal

Privacy Policy

How we collect, use and protect your personal data.

Last updated: 2 November 2026

This policy explains how Bloom MedSys ("we", "us") collects and uses personal data when you visit bloommedsys.com or contact us. We follow the Nigeria Data Protection Act 2023 (NDPA) and the regulations of the Nigeria Data Protection Commission (NDPC).

Using DocWaka, our app for finding and booking healthcare professionals? The DocWaka privacy policy explains how we handle bookings and health information there.

Who we are

Bloom MedSys is the data controller for this website. Address: Scapular Plaza, KM 17, Lekki-Epe Expressway, Lagos, Nigeria. Email: info@bloommedsys.com. Phone: +234 707 000 0654.

What we collect

  • Contact form: your name, email address, phone number (optional), organisation, the topic you choose (such as partnership, investment or media) and your message.
  • Emails, calls and meetings: what you tell us when you get in touch or work with us.
  • Technical data: your IP address, browser type and the pages you request, which our hosting provider records to run and protect the site.

Please don't send health information through this website's contact form. If you need care, use DocWaka.

How we use it, and why we're allowed to

  • To reply to your enquiry about partnerships, investment, media or our work. Lawful basis: your consent, and steps you ask us to take before entering a contract.
  • To manage partnerships and agreements with you. Lawful basis: performance of a contract.
  • To keep records the law requires. Lawful basis: legal obligation.
  • To keep this website secure and working. Lawful basis: our legitimate interests, balanced against your rights.

We don't sell your personal data, and we don't use it for advertising.

Who we share it with

  • FormSubmit (formsubmit.co), which delivers contact-form messages to our inbox.
  • Our website hosting and email providers.
  • Google Fonts, which supplies this site's fonts and receives your IP address when it does.
  • Bloom InfoSys, our sister company (a separate company), only if your enquiry is about their services and you'd like them to reply.
  • Professional advisers, regulators, courts or law enforcement, when the law requires it.

Transfers outside Nigeria

Some of these providers store or process data outside Nigeria, including in the United States and the European Union. We only transfer personal data abroad as the NDPA allows: where the destination gives adequate protection, under appropriate safeguards such as contract terms with the provider, or with your consent.

How long we keep it

We keep enquiries for up to two years after our last contact, unless they lead to a working relationship. Partnership, investment and financial records are kept for as long as Nigerian law requires.

How we protect it

This website uses encrypted connections (HTTPS). Only staff who need it can see enquiries, and we choose providers with appropriate security. If a data breach is likely to put your rights at risk, we'll report it to the NDPC within 72 hours and tell you where the law requires.

Your rights

Under the NDPA you have the right to:

  • be told how your personal data is used (this policy);
  • get a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data deleted, or its use restricted, where the law allows;
  • object to our use of your data, including for direct marketing;
  • receive your data in a format you can take elsewhere;
  • withdraw your consent at any time, without affecting anything we did before you withdrew it;
  • not be subject to decisions made solely by automated means that significantly affect you.

To use any of these rights, email info@bloommedsys.com with "Data protection" in the subject line. We may ask you to confirm your identity first. If you're unhappy with how we've handled your data, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Cookies and browser storage

This website doesn't use cookies for advertising or analytics.

Saved pages. To load faster and use less mobile data, your browser saves a copy of the pages, images and fonts you've viewed on this site, so they open again without downloading, even with no connection. These copies are the same for every visitor and contain no personal data. You can remove them at any time by clearing this site's data in your browser settings.

Data Saver and connection speed. Your browser may tell this site whether Data Saver is on and roughly how fast your connection is. The site uses this, on your device only, to decide whether to play the background video. It isn't sent to us or stored.

Children

This website is for adults. We don't knowingly collect personal data from anyone under 18.

Changes to this policy

We'll update this page if our practices change, and the date at the top will show when it was last updated.

Contact us

For questions about this policy or your data, email info@bloommedsys.com, call +234 707 000 0654, or write to us at Scapular Plaza, KM 17, Lekki-Epe Expressway, Lagos, Nigeria.