Privacy Policy
Last updated: May 29, 2026
PHMS Technologies Ltd. ("PHMS", "we", "our") operates a cloud-based hospital management platform. This Privacy Policy explains how we collect, use, store, and protect information about you and your organisation when you use our services.
1. Information We Collect
We collect information you provide directly when registering your hospital, including administrator names, email addresses, phone numbers, and facility details. We also collect technical usage data such as login timestamps, feature interactions, and system logs to maintain service performance.
2. How We Use Your Information
We use the information we collect to provision and maintain your hospital workspace, process billing and subscription payments, send administrative notifications and security alerts, provide customer support, and improve our platform. We do not sell your personal or institutional data to third parties.
3. Healthcare Data & HIPAA
PHMS is designed to support healthcare operations. We treat all patient-related data processed through our platform as Protected Health Information (PHI) under HIPAA. We maintain appropriate technical and administrative safeguards, and we enter into a Business Associate Agreement (BAA) with all healthcare customers upon request.
4. Data Security
We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication, and regular third-party security audits. Access to your data is restricted to authorised personnel only and logged for audit purposes.
5. Data Retention
We retain your account data for as long as your subscription is active. Upon cancellation, your data is retained for 90 days to allow for reactivation or export, after which it is permanently deleted from our systems unless legal obligations require otherwise.
6. Your Rights
You have the right to access, correct, or delete the personal data we hold about your organisation. You may request a data export at any time from your account dashboard. For erasure requests or data portability inquiries, contact our Data Protection Officer at privacy@phms.tech.
7. Cookies
We use strictly necessary cookies to maintain your session and authentication state. We do not use tracking or advertising cookies. You may disable non-essential cookies in your browser settings without affecting core platform functionality.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect. Continued use of the platform after changes constitutes acceptance.
9. Contact Us
For any questions regarding this Privacy Policy or our data practices, please contact us at: Email: privacy@phms.tech Address: PHMS Technologies Ltd., 14 Innovation Drive, Lagos, Nigeria.