Who we are
veoHMO Limited (“veoHMO”, “we”, “us”) is a Health Maintenance Organisation registered in Nigeria. We process personal data in accordance with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act, 2023.
This policy applies to information collected through our public website (veohmo.ng), the enrollee portal, the agent and corporate portals, and our mobile applications.
Information we collect
Information you give us
- Identification — full name, date of birth, gender, ID number (NIN, passport, or driver's licence).
- Contact — phone number, email address, physical address.
- Plan information — chosen plan, dependants, employer (for corporate plans), payment details.
- Health information — medical history, claims, prescriptions, telemedicine consultations, and any data shared with our care line.
Information collected automatically
- Device and browser data — IP address, device type, operating system, browser version.
- Usage data — pages visited, features used, time spent.
- Cookies and similar technologies — see “Cookies” below.
How we use your information
- To activate and administer your plan, including issuing your digital card.
- To process claims, authorise treatment, and pay accredited providers.
- To provide telemedicine consultations and route calls to our care line.
- To communicate with you about your account, claims, renewals, and important service changes.
- To detect, prevent, and investigate fraud, abuse, and security incidents.
- To comply with legal obligations, including regulatory and tax filings.
- To improve our products and services (using aggregated, de-identified data where possible).
When we share your information
We do not sell your personal information. We share it only in the limited cases below:
- Accredited providers — hospitals, pharmacies, and laboratories that treat you on our network. They receive only what is necessary to deliver care.
- Service vendors — payment processors, SMS gateways, cloud hosting providers, and customer-support tools. All vendors are bound by confidentiality and data-protection agreements.
- Regulators and authorities — tax authorities and law enforcement when we are legally required to comply.
- Corporate plan administrators — for employees on corporate plans, summary information (enrolment status, claim totals by category) is shared with the designated HR administrator. Individual medical details are not.
How we protect your information
We use industry-standard security controls — encryption in transit (TLS) and at rest, role-based access controls, audit logging, multi-factor authentication for staff, and regular vulnerability testing. Despite these measures, no system is perfectly secure. If we ever suspect a breach affecting your personal data, we will notify you and the NDPR regulator within 72 hours as required by law.
How long we keep your information
We retain your information for as long as your plan is active, plus the period required by Nigerian law — typically seven years for claims and financial records. After that, we either delete the information or anonymise it for statistical analysis.
Your rights under the NDPR
You have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Request deletion of your information (subject to legal retention requirements).
- Object to or restrict certain processing activities.
- Request a copy of your data in a portable format.
- Withdraw consent for processing that relies on consent (e.g. marketing).
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To exercise any of these rights, email veohealthcareproviderltg@gmail.com or call 0802 908 3842. We respond within 30 days.
Cookies and tracking
We use a small number of cookies to keep you signed in, remember your preferences, and understand how the site is used. You can block cookies in your browser settings — most of the site will still work, but some features (e.g. staying logged in) may not.
Children's information
Our services are designed for adults aged 18 and over. We collect information about dependent children only when a parent or legal guardian enrols them on a family or corporate plan, and only what is needed to provide care.
Changes to this policy
We may update this policy from time to time. We will post the new version here with a fresh “last updated” date. Material changes will be announced by email to active members.
Contact us
For privacy questions, data requests, or to reach our Data Protection Officer, contact us at:
- Email — veohealthcareproviderltg@gmail.com
- Care line — 0802 908 3842 or 0812 264 2040
- Port-Harcourt office — 12 Udom Close D/Line, Behind Nitel Garrison, Port Harcourt, Rivers State
- Lagos office — Block L2A Diamond Estate (SAFE TRUST), Monastary Road, Sangotedo, Ajah, Lagos