Last updated: 27 July 2026
1. Who is responsible for your information
Synapse Digital Care is an independent sole proprietorship based in Ibadan, Oyo State, Nigeria. For the personal information it decides to collect and use, Synapse acts as the data controller. Privacy questions and requests can be sent to kolinzoviola@gmail.com.
2. Information collected at the enquiry stage
The public form may collect your name, email address, phone or WhatsApp number, country, organisation, preferred contact method, enquiry type, consent choice, and a short general message. Information may also be received when you book through Google Calendar, contact Synapse through WhatsApp or email, or communicate about a referral or partnership.
3. Health and other sensitive information
Do not submit medical records, detailed medical histories, passport information, identity documents, payment-card information, or other highly sensitive material through the public form. If health or identity information is required for an agreed consultation or referral, Synapse will explain the purpose, recipient, appropriate channel, and consent or other lawful basis before collection or transfer.
4. Purposes and lawful bases
Depending on the interaction, information may be processed with your consent, to take steps at your request before providing a service, to perform an agreed service, for a legitimate business purpose that does not override your rights, to protect vital interests, or to meet a legal obligation. Synapse may use the information:
- To respond to an enquiry or appointment request
- To assess the requested support and identify a possible pathway
- To communicate proposed next steps and assessment-based pricing
- To discuss a healthcare, corporate, or referral partnership
- To coordinate an agreed consultation, referral, or logistics service
- To protect safety and maintain necessary business or legal records
5. How the website form is delivered
Form submissions are transmitted to a server-side website function and delivered to Synapse by email. Vercel provides website hosting and function processing, while Resend provides transactional email delivery. The website does not place enquiry submissions in a separate patient database. The resulting email may remain in Synapse’s business mailbox and in the operational systems of relevant service providers.
6. Sharing and recipients
Personal information is not sold. Limited information may be shared with hosting, email, calendar, communication, security, and professional-service providers that support Synapse. For an agreed care pathway, information may also be shared with a healthcare provider, transport or logistics provider, referral institution, or other destination involved in the request. Sensitive information should be shared only after the purpose, recipient, authority, and appropriate channel have been established.
7. International processing and referrals
Vercel, Resend, Google, WhatsApp, email providers, and international referral partners may process information outside Nigeria. Where the Nigeria Data Protection Act applies, Synapse will seek an appropriate basis and level of protection for a cross-border transfer. Before sensitive patient information is sent to an international destination, the purpose, recipient, relevant risks, and required authorisation should be explained.
8. Retention
General enquiry emails are intended to be reviewed for deletion no later than 12 months after the last substantive contact. Information may be retained for longer where an enquiry becomes an active service record, where a legal or professional obligation applies, for dispute management, or where another lawful purpose requires it. Information that is no longer required should be securely deleted or anonymised.
9. Security and data minimisation
Synapse limits the public form to information needed for an initial response and uses reasonable administrative and technical safeguards. No online system can be guaranteed completely secure. If a personal data breach creates a risk that requires notification under applicable law, Synapse will take reasonable steps to investigate, contain, and make the required notifications.
10. Your data-protection rights
Subject to applicable law, you may ask to be informed about processing, access your information, correct inaccurate information, object to or restrict processing, withdraw consent, request deletion or portability, and challenge solely automated decisions. Synapse does not currently use the public form to make solely automated clinical or eligibility decisions. Identity verification may be required before a request is completed, and lawful exceptions may apply.
11. Children and representatives
A parent, legal guardian, or properly authorised representative should make an enquiry for a child or another person who cannot act for themselves. Do not submit a child’s detailed health information through the public form.
12. Technical information and cookies
The website does not currently use non-essential advertising cookies. Hosting and security services may process limited technical information such as an IP address, browser type, request time, and diagnostic logs to deliver and protect the website. External services reached through links apply their own cookie and privacy practices.
13. Complaints
Please contact Synapse first so the concern can be investigated. You also have the right to lodge an eligible complaint with the Nigeria Data Protection Commission.
14. Changes to this notice
This notice may be updated as the website, enquiry system, service providers, or care-coordination processes change. Material changes should be reflected on this page, and the date above identifies the current version.