1. Who We Are

BarnMD is the public identity of Barn Medical Doctors Mission, a Nigerian Incorporated Trustee organisation registered with the Corporate Affairs Commission (CAC) under registration number RC-128349. BarnMD advances medical education, preventive healthcare, public health initiatives, and responsible digital health innovation across Nigeria and beyond.

2. Scope of This Privacy Policy

This Privacy Policy applies to information collected through the BarnMD website, digital platforms, health education resources, programmes, membership services, communication channels, and future digital health services operated by BarnMD.

3. Information We Collect

• ✓Identity Information: Name, email address, telephone number, date of birth, location, and other information voluntarily provided during registration or communication.
• ✓Programme Information: Course participation, training activities, workshop attendance, feedback, surveys, and engagement information.
• ✓Health Information: Where voluntarily provided, health-related information required for health education, public health programmes, screening initiatives, or future healthcare services.
• ✓Technical Information: IP address, browser information, device information, operating system, and website usage analytics.
• ✓Account Information: Authentication details, profile information, preferences, and account activity.

4. Health and Clinical Information

Health information is treated with additional protection because it may constitute sensitive personal data. BarnMD applies appropriate safeguards when collecting, processing, storing, or managing health-related information for approved health programmes, educational activities, screening initiatives, or future healthcare services.

5. How We Use Your Information

• ✓To provide access to BarnMD educational resources, programmes, and services.
• ✓To support community health initiatives and public health activities.
• ✓To communicate programme updates, educational materials, and organisational information.
• ✓To manage accounts, registrations, and user interactions.
• ✓To improve website performance, resources, and user experience.
• ✓To maintain organisational security, accountability, and regulatory compliance.

6. Legal Basis for Processing Personal Data

BarnMD processes personal information based on applicable legal grounds including consent, legitimate organisational interests, contractual requirements where applicable, legal obligations, and the provision of nonprofit health education and community health services.

7. Data Protection and Regulatory Alignment

BarnMD is committed to responsible data management practices aligned with applicable data protection frameworks including the Nigeria Data Protection Act 2023 and, where applicable, the General Data Protection Regulation (GDPR) for individuals within the European Economic Area.

8. Data Controller

Barn Medical Doctors Mission (BarnMD) acts as the data controller for personal information collected through its platforms and programmes. BarnMD determines why and how personal information is processed while ensuring appropriate privacy safeguards.

9. Third-Party Service Providers

BarnMD may use trusted technology providers to support secure operations. These may include authentication services, cloud infrastructure providers, communication platforms, nonprofit technology partners, and operational software providers. These organisations process information only according to appropriate agreements and security requirements.

10. Technology Platforms

BarnMD uses technology platforms designed to support secure nonprofit operations. Depending on the service, these may include Microsoft 365 services, Microsoft Graph integrations, Supabase authentication and database infrastructure, and other approved technology providers.

11. Data Security

BarnMD applies reasonable technical and organisational measures designed to protect personal information. These measures include access controls, secure authentication, encryption practices, system monitoring, secure infrastructure configuration, and appropriate administrative safeguards.

12. Data Storage and International Transfers

Personal information may be processed or stored using secure technology providers operating in different jurisdictions. BarnMD takes reasonable steps to ensure appropriate protection measures are applied when information is transferred or processed internationally.

13. Data Retention

BarnMD retains personal information only for as long as necessary to fulfil the purpose for which it was collected, meet legal and regulatory obligations, maintain organisational records, resolve disputes, and support legitimate operational requirements.

14. Cookies and Website Analytics

BarnMD may use cookies and analytics technologies to understand website usage, improve performance, enhance user experience, and maintain platform security. Users may manage cookie preferences through their browser settings or available consent management tools.

15. Your Privacy Rights

Depending on your location and applicable law, you may have rights including access to your personal information, correction of inaccurate information, deletion requests, withdrawal of consent, restriction of processing, objection to certain processing activities, and data portability where applicable.

16. Exercising Your Rights

Requests relating to personal information should be submitted to the BarnMD Privacy Office. We may request sufficient information to verify your identity before processing privacy requests.

17. Children's Privacy and Safeguarding

BarnMD is committed to protecting children and vulnerable individuals. Where programmes involve minors, appropriate safeguarding procedures, consent requirements, and responsible data handling practices will apply.

18. Public Health and Healthcare Services

BarnMD supports health education, preventive healthcare, and community health programmes. Where healthcare services or telemedicine services are introduced, additional clinical privacy requirements, healthcare governance standards, and applicable professional obligations will apply.

19. BarnMD and BarnOS™ Privacy Separation

BarnMD and BarnOS™ represent separate but related initiatives. BarnMD is the nonprofit healthcare organisation responsible for public health programmes, medical education, and community health activities. BarnOS™ is a healthcare technology platform and intellectual property initiative developed to support digital health innovation. Privacy governance, ownership, and technology responsibilities are maintained separately where applicable.

20. External Links

The BarnMD website may contain links to external websites, resources, or partner platforms. BarnMD is not responsible for the privacy practices, security measures, or content of third-party websites.

21. Changes to This Privacy Policy

BarnMD may update this Privacy Policy periodically to reflect changes in services, technology, regulations, or organisational practices. Significant updates will be published with a revised effective date.

22. Contact the BarnMD Privacy Office

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or require additional information about how BarnMD manages personal data, please contact us.