This policy explains what personal information V-Wealt Eye Care and Services Ltd (“we”, “us”) collects when you visit our clinic, book an appointment, buy from our optical shop or use this website, why we use it, how long we keep it and your rights under the Nigeria Data Protection Act 2023 (NDPA).
Who we are
We are the data controller for the information described here. You can contact us about anything in this policy:
- Office 13, Dr Otue Plaza
beside Chichotel Hotel, 72 Arthur Eze Avenue
Emmanemeka Junction, Awka
Anambra State, Nigeria
What we collect
- Appointments: your name, phone number, email address, the service and time you choose, any note you add, and (if you give it) your date of birth.
- Patient records: when you are seen at the clinic, your optometrist records your eye-health history, test results, prescriptions and treatment. This is health information, which the law treats as sensitive personal data.
- Shop orders: your name, contact details, delivery or collection details, what you ordered and how you paid. If you pay by bank transfer, the receipt or screenshot you upload as proof of payment.
- Messages: what you tell us by phone, email or WhatsApp.
- Website visits: anonymous counts of page views (see “Cookies and site statistics” below) and, for security, the internet (IP) address of failed or blocked sign-in attempts.
Why we use it, and our lawful basis
- To provide eye care (booking, examining and treating you, making your glasses or lenses, reminders and follow-ups): because it is needed for the service you asked for (contract), and for health information, because it is processed by health professionals bound by a duty of confidentiality, or with your explicit consent.
- To fulfil shop orders and confirm payments: contract.
- To keep records we are required to keep (for example accounts and tax): legal obligation.
- To keep the website and records secure: our legitimate interests in protecting patients’ information.
- In an emergency, to protect your vital interests.
We do not sell your information, and we do not use it for advertising.
Who we share it with
- Our clinical and front-desk staff, only as far as each person needs for their job. Access to patient records is limited by role and every view or change is logged.
- Lens laboratories and suppliers, who receive only the prescription and measurements needed to make your glasses or lenses.
- Other health professionals, such as a hospital or specialist, when you are referred (we will tell you first unless it is an emergency).
- Our website host and email provider, who store data for us under contract.
- Authorities, where the law requires it.
How long we keep it
- Patient records: 10 years after your last visit, then they are reviewed for deletion. Records of children are kept at least until they turn 18 plus this period.
- Appointment requests that never became a visit: up to 12 months.
- Shop orders and proof of payment: 6 years, for our accounts.
- Security log of sign-in attempts: 30 days.
- Anonymous page-view counts: about 13 months.
Cookies
We use a small number of cookies. Essential cookies keep your basket, checkout, bookings and sign-in working and remember your cookie choices; they are always on. Optional cookies are only used if you allow them: to remember your preferences, to record how you found our shop with an online order, and for maps or videos from other websites if we add any. We don’t use advertising cookies.
Our own visitor statistics use no cookies and no third-party trackers. They count page views and visits using a code that changes every day, so no one can be followed from day to day, and no IP address is stored. Map links open Google Maps in a new tab.
Our cookie policy lists every cookie and what it does. You can change your cookie settings at any time.
Your rights
Under the NDPA you can ask us to:
- give you a copy of the information we hold about you;
- correct information that is wrong or incomplete;
- delete information we no longer need, or restrict how we use it;
- stop using your information for a purpose you object to;
- give you your information in a common electronic format;
- withdraw consent you have given (this doesn’t affect what we did before).
Contact us to make a request. We will reply within 30 days. Some health records must be kept for your care or by law; if so, we will explain why. If you are unhappy with how we handle your information, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
Keeping your information safe
The website uses an encrypted connection (HTTPS). Staff accounts are protected against password guessing, access to patient records is limited by role and logged, and we never put health details in web addresses or emails’ subject lines.
Children
A parent or guardian should book appointments and place orders for anyone under 18, and can exercise the child’s rights on their behalf.
Changes to this policy
We will update this page if the way we use personal information changes, and show the date at the bottom.
Last updated: 30 September 2026