+234 912 091 4837emmalabglobal@gmail.com
Emma Lab
Emma LabGlobal Services Ltd.

Privacy Policy

Your health information is personal. This policy explains what we collect, why, who we share it with, and the choices you have.

Last updated: 24 October 2026

1. Who we are

Emma Lab Global Services Ltd. is the data controller for personal information collected through this website and at our branches. We handle personal data in line with the Nigeria Data Protection Act 2023 and the rules of the Nigeria Data Protection Commission (NDPC).

2. What we collect

  • Contact details — your name, email address and phone number when you check out, book an appointment, contact us or join our newsletter.
  • Order details — the tests and bundles you buy, order references, amounts and payment status.
  • Health information — samples, test results and any clinical details needed to carry out your tests. This is sensitive data and gets extra protection.
  • Account details — if you create an account, your login email, saved plans and order history.
  • Job applications — your CV, cover letter and contact details if you apply for a role.
  • Technical data — basic information your browser sends (such as IP address and device type), used for security and to keep the site running.

We do not collect or store your card or bank details. Payments are handled entirely by Paystack.

3. How we use it

  • To process your order and payment, and send confirmations.
  • To verify your identity with a one-time code at checkout.
  • To carry out your tests and deliver your results.
  • To respond to messages and manage appointments.
  • To process refunds and keep financial records.
  • To send newsletters and offers — only if you subscribed, and you can unsubscribe at any time.
  • To consider job applications.
  • To protect the website from fraud and abuse.

We rely on your consent, the need to provide the service you ordered, our legal obligations (for example, medical and tax records), and our legitimate interest in running a secure service.

4. Who we share it with

We never sell your personal information. We share it only with:

  • Paystack — to process payments and refunds.
  • Service providers who host our website and database, and send our emails, under agreements that require them to protect your data.
  • Your doctor, company or HMO — only where they referred you or you have asked us to.
  • Regulators and authorities — where the law requires it, such as public-health reporting.

Some of these providers may store data outside Nigeria. Where they do, we make sure appropriate safeguards are in place, as the law requires.

5. Sending results

When you choose to receive results by email or WhatsApp, we send them only to the contact details you gave us. Please make sure they are correct and that you are comfortable receiving health information there. Hard copies are released only to you or someone you authorise.

6. How we protect it

We use encrypted connections (HTTPS), restricted staff access, and secure hosting. Laboratory records are handled only by authorised staff. No system is perfectly secure, but we act quickly on any incident and will notify you and the NDPC where required.

7. How long we keep it

We keep medical and test records for as long as Nigerian health regulations require. Order and payment records are kept for as long as tax and accounting rules require. Newsletter details are kept until you unsubscribe, and unsuccessful job applications are deleted after 12 months.

8. Cookies and local storage

We use only what the site needs to work: your browser stores your basket so it is still there when you return, and signed-in users get a login cookie. We do not use advertising cookies.

9. Your rights

Under Nigerian data protection law you can ask us to:

  • give you a copy of the personal data we hold about you;
  • correct information that is wrong or incomplete;
  • delete your data, where we are not legally required to keep it;
  • stop or limit how we use it, or withdraw consent;
  • send your data to you or another provider.

Contact us using the details below and we will respond within 30 days. If you are unhappy with our response, you can complain to the Nigeria Data Protection Commission.

10. Children

Tests for anyone under 18 must be booked by a parent or guardian, who provides and manages the child’s information.

11. Changes to this policy

We may update this policy. The current version is always on this page with its “last updated” date. See also our Terms & Conditions.

12. Contact us

Back to Top