Privacy Policy
Section 01
1. Introduction
The Basic Health Care Provision Fund (BHCPF) is a Federal Government of Nigeria health financing initiative established under the National Health Act, 2014. It supports access to essential healthcare services, strengthens primary healthcare delivery, expands health insurance coverage, and contributes to the achievement of Universal Health Coverage in Nigeria.
This Privacy Policy explains how the BHCPF website, accessible at https://bhcpf.gov.ng/, collects, uses, stores, protects, and discloses information when visitors access or interact with the website.
BHCPF is committed to respecting the privacy of website visitors and handling personal information responsibly, transparently, and in accordance with applicable Nigerian laws, including the Nigeria Data Protection Act, 2023, and other applicable data protection requirements.
This policy applies to visitors who browse the website, contact BHCPF through available communication channels, subscribe to updates where offered, download publications, or otherwise interact with the website.
Section 02
2. Information We May Collect
The information collected depends on how you use the website and the features available at the time of your visit.
2.1 Information You Provide
When you contact us or use an interactive feature, we may collect information such as:
- Your name.
- Email address and telephone number.
- The subject and contents of your enquiry or message.
- Information submitted through contact forms, subscription forms, feedback channels, or other website forms, where available.
- Any documents or attachments you voluntarily submit through an authorised website feature.
2.2 Technical and Usage Information
When you visit the website, certain technical information may be collected automatically by the website, its hosting provider, or authorised service providers. This may include:
- Internet Protocol (IP) address.
- Browser type and version.
- Device type and operating system.
- Pages visited, links accessed, and the date and time of visits.
- Referring website addresses.
- Website performance, diagnostic, and security logs.
Important Caution on Sensitive Information
Please do not submit sensitive personal information, including medical records, identification documents, or another person's personal information, unless it is specifically required through an authorised channel and appropriate privacy safeguards are provided.
This information may be used to maintain website functionality, identify technical issues, understand general usage patterns, and protect the website against unauthorised activity.
The specific information collected will depend on the website's actual technical configuration.
Section 03
3. How We Use Information
Information collected through the website may be used to:
Respond to enquiries, feedback, and requests for information.
Provide access to BHCPF publications, programme updates, announcements, and other public information.
Improve the website's accessibility, usability, performance, and content.
Monitor website traffic and understand how visitors interact with published information.
Detect, investigate, and prevent fraud, cyberattacks, unauthorised access, and other security incidents.
Maintain administrative records and meet applicable legal, regulatory, and public-sector obligations.
Communicate information that visitors have requested or agreed to receive, where such communication features are available.
Protect the rights, safety, and legitimate interests of BHCPF and website users, where permitted by law.
BHCPF will not use personal information for purposes that are incompatible with the purpose for which it was collected, unless a lawful basis permits such further processing.
Section 04
4. Lawful Basis for Processing
BHCPF will process personal data only where an applicable lawful basis exists under Nigerian data protection law.
Depending on the circumstances, the lawful basis may include:
Public interest or official authority
Processing necessary to perform lawful public functions relating to the administration, communication, or oversight of BHCPF.
Legal obligation
Processing necessary to comply with applicable laws, regulations, or lawful requests.
Consent
Processing based on your freely given consent where consent is the appropriate legal basis.
Legitimate interests
Processing necessary for a legitimate purpose, where recognised by law and where the interests and fundamental rights of the data subject do not override that purpose.
Where consent is relied upon, you may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
Section 05
5. Cookies and Similar Technologies
The website may use cookies or similar technologies to support essential website functions, remember preferences, improve performance, and understand website usage.
Where applicable, cookies may include:
Essential cookies
Required for core website functions, security, or navigation.
Preference cookies
Used to remember choices made by visitors.
Analytics cookies
Used to understand how visitors use the website and identify areas for improvement.
Non-essential cookies will be used in accordance with applicable legal requirements, including obtaining consent where required.
You may manage or disable cookies through your browser settings and any cookie preference tool made available on the website. Disabling certain cookies may affect some website features.
The categories of cookies used, their providers, and their retention periods should be confirmed against the website's actual configuration.
Section 06
6. Disclosure of Information
Personal information may be disclosed, where necessary and lawful, to:
Authorised government institutions or public bodies involved in the administration, implementation, monitoring, or oversight of BHCPF.
Website hosting providers, technical support providers, analytics providers, and other authorised service providers.
Professional advisers, auditors, or relevant regulatory authorities where required.
Law enforcement agencies, courts, or other competent authorities where disclosure is required or authorised by law.
Where third parties process personal information on behalf of BHCPF, appropriate contractual and organisational safeguards should be implemented to protect that information and limit its use to authorised purposes.
Section 07
7. Third-Party Websites and Services
The BHCPF website may contain links to external websites, government agencies, implementing partners, publications, video platforms, or other online services.
These external websites operate under their own privacy policies and terms of use. BHCPF does not control the privacy practices of independent third-party websites and encourages visitors to review the relevant policies before providing personal information.
A link to an external website does not, by itself, constitute an endorsement of all the content, products, or services available on that website.
Section 08
8. Data Security
BHCPF will take appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, destruction, or misuse.
Depending on the nature of the information and the risks involved, these measures may include access controls, secure connections, system updates, backups, restricted administrative access, and security monitoring.
No website or electronic transmission can be guaranteed to be completely secure. Visitors should exercise reasonable care when submitting information online and should avoid sending confidential information through unauthorised channels.
Where a personal data breach occurs, BHCPF will take appropriate steps in accordance with applicable legal requirements.
Section 09
9. Data Retention
Personal information will be retained only for as long as reasonably necessary to fulfil the purpose for which it was collected, comply with legal obligations, maintain appropriate public-sector records, resolve disputes, or establish and defend legal claims.
Retention periods may differ depending on the type of information, the purpose of processing, and applicable government records management requirements.
When personal information is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in accordance with applicable requirements, unless continued retention is legally necessary.
Section 10
10. Your Data Protection Rights
Subject to applicable law and any lawful exemptions, you may have the right to:
Be informed about how your personal data is processed.
Request access to personal data held about you.
Request correction of inaccurate or incomplete personal data.
Request erasure of personal data in circumstances permitted by law.
Request restriction of processing in applicable circumstances.
Object to certain types of processing.
Request the transfer of your personal data where the right to data portability applies.
Withdraw consent where processing is based on consent.
Exercise rights relating to decisions based solely on automated processing, where applicable.
Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
These rights are not absolute and may be subject to statutory conditions, public-interest considerations, legal obligations, or other lawful exemptions.
To exercise your rights, please contact the BHCPF website administrator or designated data protection contact using the official contact details published on the website. You may be asked to provide reasonable information to verify your identity and clarify your request.
You may also contact the Nigeria Data Protection Commission through its official website at https://ndpc.gov.ng/.
Visit NDPCSection 11
11. Children's Privacy
The BHCPF website is intended to provide public information about healthcare financing and programme implementation. It is not intended to collect children's personal information unnecessarily.
Where personal data relating to a child is collected through a website feature, BHCPF will ensure that the processing is carried out in accordance with applicable data protection requirements and any necessary safeguards.
Parents, guardians, or other legally authorised representatives may contact BHCPF through its official communication channels regarding concerns about a child's personal information.
Section 12
12. International Transfers
Where personal data is transferred outside Nigeria or accessed by a service provider located outside Nigeria, BHCPF will ensure that the transfer complies with applicable Nigerian data protection requirements and that appropriate safeguards are in place where required.
Section 13
13. Changes to This Privacy Policy
BHCPF may update this Privacy Policy to reflect changes in applicable laws, website features, operational practices, or data protection requirements.
The updated version will be published on this page with a revised "Last Updated" date. Visitors are encouraged to review this page periodically.
Where required by law, additional notice or consent will be provided for material changes to the processing of personal information.
Section 14
14. Contact and Privacy Enquiries
For questions, complaints, or requests concerning this Privacy Policy or the handling of your personal information, please use the official contact channels published on the BHCPF website.
Website
https://bhcpf.gov.ng/bhcpf.comms@gmail.com
Please include sufficient details to enable us to understand and respond to your enquiry. Do not include unnecessary sensitive personal information in your message.