Privacy Notice

In short

• This notice covers the statorhealth.com website.
• We only get what you choose to send us: the contact form, the walkthrough form, or a message on WhatsApp, by phone or by email. We use it to reply to you and to arrange a walkthrough, and for nothing else.
• The site sets no cookies, runs no analytics and loads nothing from other websites.
• Patient records inside the Stator app are covered by each clinic's own privacy notice and our Data Processing Agreement, not by this page.

1. Who we are

1.1. statorhealth.com is run by Stator Health Ltd (RC 9955767), a company registered in Nigeria ("Stator Health", "we", "us").

1.2. For what you send us through this website, we are the data controller under the Nigeria Data Protection Act 2023.

1.3. Contact: hello@statorhealth.com, with "Privacy" in the subject. We haven't yet appointed a data protection officer; until we do, a director of Stator Health Ltd answers privacy questions.

2. What this notice covers

2.1. This notice covers the website and the ways you can reach us from it: the contact form, the walkthrough form, WhatsApp, a phone call and email.

2.2. It doesn't cover the Stator app at app.statorhealth.com or a clinic's own Stator address. Inside the app, each clinic decides how its patients' and staff's data is used, and we process that data for the clinic under our Data Processing Agreement. If you are a patient, please contact your clinic about your records.

3. What we collect

3.1. Through the contact form: your name, your clinic's name if you give it, a phone number or email address for our reply, and your message.

3.2. Through the walkthrough form: your name and your role at the clinic; the clinic's name and its area or city; how many physiotherapists and branches it has; whether it does home visits and sees HMO patients; how it keeps records today, and the name of the system it uses if you give one; how you'd like us to reach you (WhatsApp, phone or email) and the number or address; the days and times that suit you; and your message, if you add one.

3.3. When you message, call or email us: your name, number or address, and what you tell us.

3.4. When you browse the site: we don't collect anything ourselves. The site sets no cookies, runs no analytics, has no tracking pixels and loads no scripts, fonts or maps from other websites. The map on the contact page is a plain link to Google Maps; nothing is sent to Google unless you click it. Cloudflare, which hosts the site, processes your IP address and browser details to deliver the pages and protect the site from attacks (section 6).

3.5. Please don't send patient details through the forms, WhatsApp or email. We don't need them to arrange a walkthrough.

3.6. When you book a walkthrough on Cal.com: you pick the time on Cal.com's own booking page, under Cal.com's privacy policy. The details you give there go to Cal.com and to us, and we use them only to arrange and run the walkthrough.

4. How the forms work

4.1. The contact form and the walkthrough form work the same way. When you send either one, your browser sends it over an encrypted connection to our form handler, a small program that runs on Cloudflare's network.

4.2. The form handler checks the form, then passes it to Resend (EU region), which emails it to our inbox at hello@statorhealth.com. If you gave an email address, our reply goes straight back to it.

4.3. The form handler stores nothing: no database, no log of what you wrote. The email in our inbox is the only copy we keep.

4.4. To stop people flooding the forms, Cloudflare counts how many messages come from each IP address over one minute, for both forms together. Your IP address is used only as that counter's key. It isn't added to the email and we don't keep it.

5. Why we use it, and on what basis

5.1. We use what you send only to reply to you, to arrange and run a walkthrough, and, if your clinic decides to use Stator, to prepare a quote and set the clinic up.

5.2. Our lawful basis under the Act is that you asked us to do this, as steps before a possible contract, and our legitimate interest in answering people who contact us.

5.3. We don't sell your details, use them for advertising or add you to a mailing list. We won't contact you about anything other than your request unless you ask us to.

6. Who else handles it

Some of these providers process your details outside Nigeria. We use providers that commit by contract to protect personal data, and we send them only what they need to do their job.

7. How long we keep it

We keep messages and our replies for as long as we're talking with you. If your clinic doesn't go on to use Stator, we delete them within 12 months of our last contact. If it does, we keep what we need to run the clinic's account for as long as the clinic is a customer, and as the law requires after that.

8. Your rights

8.1. Under the Nigeria Data Protection Act 2023 you have the right to:

• be told how your personal data is used, which is what this notice is for;
• get a copy of the personal data we hold about you;
• have it corrected if it is wrong, or deleted;
• restrict or object to how we use it;
• receive it in a common format, or have it sent to someone else;
• withdraw any consent you gave, at any time.

8.2. To use any of these rights, email hello@statorhealth.com with "Privacy" in the subject and tell us which message or conversation it is about. We reply within 7 days and complete the request within 30 days.

8.3. If you're not happy with how we handled your data, please tell us first. You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

9. Security

The site is served only over HTTPS, and the form handler accepts a form only from this website's own pages. Only the people who run Stator Health can read the inbox.

10. Children

The site is for clinics and the people who run them. It isn't meant for children, and we don't knowingly collect children's data through it.

11. Changes to this notice

If we change how the website handles personal data, we update this page and the date at the top.