Privacy notice

1. Who we are

The Lagos State Traditional Medicine Board (“the Board”, “we”) registers and licenses traditional medicine practitioners and premises in Lagos State. The Board decides how your personal data is used on this portal, so it is the data controller under the Nigeria Data Protection Act 2023 (NDPA).

2. What we collect

We collect only what we need to register, assess and license you, and to regulate your premises:

• Account details: your name, email address, phone number and WhatsApp number.
• Identity details: your National Identification Number (NIN), date and place of birth, gender, nationality, state and local government of origin, and your passport photograph.
• Practice details: your practitioner category, specialisation, qualifications, training, years of experience, association membership and where you practise.
• Documents you upload: your NIN slip, certificates or training evidence, association letter and referee forms.
• Other people’s details you give us: the name, address, phone number, occupation and relationship of your two referees and your next of kin. Please tell them you are sharing their details with the Board.
• Facility details: the name, type, address, location (including GPS position if you choose to share it), photographs and contact details of any premises you register, and the results of inspections.
• Payments:the fees you pay, their references and whether they succeeded. Card and bank details are entered on the payment provider’s page; the Board does not see or store your full card details.
• Records of your progress: attestation and training attendance, review decisions, your licence and sign-post numbers, and messages we send you.
• Technical records: sign-in times and a record of important actions on your account, kept to protect it and to show who did what.

3. Why we use it, and on what legal basis

We use your personal data to:

• create and protect your account, and confirm your email address and phone number;
• assess your application, arrange attestation and training, and issue and renew your licence;
• register, inspect and regulate facilities, and issue sign-posts;
• take and confirm payments;
• send you updates about your application by email, text message or WhatsApp;
• keep the public register that lets anyone check a licence or sign-post;
• investigate complaints and take enforcement action where the law requires it.

We do this because it is needed for the Board’s official functions under Lagos State law and to meet our legal obligations. Where we rely on your consent, for example to contact you on WhatsApp, you can withdraw it at any time. Decisions on your application are made by Board officers, not by a computer.

4. What the public can see

When your licence is issued, anyone who checks your licence number can see your name, passport photograph, practitioner category, licence status and expiry date. For a registered facility, the public can see its name, address, status and sign-post number. This lets patients confirm that a practitioner or premises is licensed. Your NIN, contact details, documents, referees and next of kin are never shown publicly.

5. Who we share it with

We share your personal data only when we need to:

• Service providers who run parts of the portal for us: hosting, email, text and WhatsApp message delivery, and payment processing. They may use your data only to provide that service.
• Lagos State Government bodies, such as the State Ministry of Health and its health facility registry, where regulating health services requires it.
• Law enforcement, courts and regulators, when the law requires us to.

We do not sell your personal data or use it for advertising.

Some service providers may store data outside Nigeria. Where they do, we use the safeguards the NDPA requires.

6. How long we keep it

We keep your records while you are applying for, or hold, a licence or facility registration, and afterwards for as long as the Board’s record-keeping rules and the law require. If you start an account but never apply, we may delete it after a period of inactivity.

7. How we protect it

The portal uses encrypted connections, signs you out after an hour without activity, and limits each officer to the records their role needs. Documents are stored privately and opened only through the portal. Keep your password and one-time codes to yourself: the Board will never ask you for them.

8. Your rights

Under the NDPA you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that is wrong or incomplete;
• delete your data, where we no longer need it or have no legal reason to keep it;
• limit or stop some uses of it, or give it to you in a form you can take elsewhere;
• stop using it where you gave consent.

Some rights are limited where we must keep records to regulate practice by law. You can correct many details yourself from your account. For anything else, email support@lstmb.lagos.gov.ngwith the subject “Data protection”. We will reply within the time the law allows.

If you are not happy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).

9. Cookies and similar technology

The portal stores a small amount of information in your browser to keep you signed in and to sign you out when you are inactive. It does not use advertising or tracking cookies.

10. Changes to this notice

We will update this notice when the way we use personal data changes, and show the date of the latest version at the top. If a change affects you significantly, we will tell you when you next sign in. See also our terms of use.