# MEZO HEALTH — TERMS OF SERVICE AND HEALTH DATA CONSENT **Effective Date: _____________ 2026** --- ## PART A: TERMS OF SERVICE ### 1. INTRODUCTION 1.1 These Terms of Service ("Terms") govern your use of the Mezo platform (the "Platform"), operated by **Mezo Health Technologies Limited** (RC: ___________), a company incorporated under the Companies and Allied Matters Act 2020, with its registered office at _________________________________, Lagos, Nigeria ("Mezo", "we", "us", or "our"). 1.2 By accessing or using the Platform, you agree to be bound by these Terms. If you do not agree to these Terms, you must not use the Platform. 1.3 These Terms are governed by the Laws of the Federal Republic of Nigeria, including the Federal Competition and Consumer Protection Act 2018 (FCCPA), the Nigeria Data Protection Act 2023 (NDPA), and the National Health Act 2014. ### 2. THE PLATFORM 2.1 **What Mezo Is:** Mezo is a technology platform that enables you to find, compare, and book appointments with verified specialist medical practitioners ("Doctors") at partner healthcare facilities across Nigeria. Mezo also facilitates payment for medical consultations and enables the purchase of bundled healthcare packages. 2.2 **What Mezo Is Not:** Mezo is NOT a healthcare provider. Mezo does not provide medical advice, diagnosis, or treatment. The relationship between you and a Doctor is a direct doctor-patient relationship. Mezo acts solely as a technology intermediary. 2.3 **Doctor Verification:** All Doctors on the Platform have been verified against the Medical and Dental Council of Nigeria (MDCN) register. This verification confirms that the Doctor holds a valid and current MDCN registration. It does not constitute a recommendation or endorsement of any Doctor's clinical abilities. ### 3. ELIGIBILITY 3.1 You must be at least eighteen (18) years of age to create an account on the Platform. 3.2 If you are booking an appointment on behalf of a minor (under 18 years), you represent that you are the minor's parent or legal guardian and that you consent to the collection and processing of the minor's health data in accordance with Part B of these Terms. ### 4. YOUR ACCOUNT 4.1 You are responsible for maintaining the confidentiality of your account credentials. 4.2 You agree to provide accurate, current, and complete information during registration and to update such information as necessary. 4.3 You shall not share your account with any third party. 4.4 You shall notify us immediately of any unauthorised use of your account. ### 5. BOOKINGS AND CANCELLATIONS 5.1 **Booking:** When you book an appointment through the Platform, you are entering into a direct arrangement with the Doctor. Mezo facilitates this arrangement but is not a party to the doctor-patient relationship. 5.2 **Fees:** Consultation fees are set by the Doctor and displayed on the Platform before you confirm your booking. The total amount displayed at checkout includes the Doctor's consultation fee and any applicable platform booking fee. There are no hidden charges. 5.3 **Payment:** Payment is processed through Paystack, a CBN-licensed payment processor. Mezo does not store your card details. All payments are secured with industry-standard encryption. 5.4 **Cancellation by You:** You may cancel a Booking free of charge up to twenty-four (24) hours before the scheduled appointment. Cancellations made less than twenty-four (24) hours before the appointment may be subject to a cancellation fee of up to fifty per cent (50%) of the consultation fee, at the Doctor's discretion. 5.5 **Cancellation by Doctor:** If a Doctor cancels your appointment, you will receive a full refund and the option to rebook with the same or a different Doctor at no additional charge. 5.6 **No-Show:** If you fail to attend a confirmed appointment without cancelling, you may be charged the full consultation fee. ### 6. HEALTHCARE PACKAGES AND SUBSCRIPTIONS 6.1 The Platform offers bundled healthcare packages ("Packages") sold by group practices operating on the Platform. 6.2 Packages are subject to their own specific terms, including validity periods, included services, and expiry rules, which are displayed on the Package detail page before purchase. 6.3 Unused Package items may be converted to wallet credits upon expiry, as specified in the Package terms. 6.4 Packages are non-transferable unless explicitly stated otherwise. ### 7. PLATFORM DISCLAIMER 7.1 **No Medical Advice:** The Platform, including any health guides, condition information, or search results, is provided for informational purposes only and does not constitute medical advice. Always seek the advice of a qualified healthcare provider regarding any medical condition. 7.2 **No Endorsement:** The listing of a Doctor or Facility on the Platform does not constitute an endorsement or recommendation by Mezo of that Doctor's or Facility's services. 7.3 **No Liability for Clinical Outcomes:** Mezo shall not be liable for any medical outcome, diagnosis, treatment, injury, or death arising from services provided by a Doctor. Your recourse for clinical matters is directly with the Doctor and, where applicable, the MDCN. ### 8. LIMITATION OF LIABILITY 8.1 To the maximum extent permitted by law, Mezo's total liability to you for any claims arising under or in connection with these Terms shall not exceed the total amount you have paid to Mezo in the twelve (12) months preceding the claim. 8.2 Mezo shall not be liable for any indirect, incidental, special, consequential, or punitive damages. 8.3 Nothing in these Terms excludes liability for death or personal injury caused by negligence, fraud, or any liability that cannot be excluded by Nigerian law. 8.4 Your rights under the Federal Competition and Consumer Protection Act 2018 are not affected by these Terms. ### 9. YOUR RIGHTS UNDER NIGERIAN LAW 9.1 You have the right to fair value and good quality services under the FCCPA. 9.2 You have the right to lodge a complaint with the Federal Competition and Consumer Protection Commission (FCCPC) at any time. 9.3 You have rights in respect of your personal data under the NDPA, as set out in Part B of these Terms. ### 10. INTELLECTUAL PROPERTY 10.1 All intellectual property in the Platform (including software, design, trademarks, and content) belongs to Mezo. 10.2 You are granted a limited, non-exclusive, non-transferable licence to use the Platform for personal, non-commercial purposes in accordance with these Terms. ### 11. TERMINATION 11.1 You may close your account at any time by contacting us. 11.2 We may suspend or terminate your account if you breach these Terms or if required by law. 11.3 Upon termination, we will process any pending refunds and, upon request, provide you with a copy of your data in accordance with the NDPA. ### 12. DISPUTE RESOLUTION 12.1 Any dispute arising from these Terms shall first be addressed through our customer support team. 12.2 If the dispute is not resolved within fourteen (14) days, it may be referred to mediation at the Lagos Multi-Door Courthouse. 12.3 You retain the right to lodge a complaint with the FCCPC at any time, regardless of this dispute resolution clause. 12.4 These Terms are governed by the Laws of the Federal Republic of Nigeria. ### 13. CHANGES TO THESE TERMS 13.1 We may update these Terms from time to time. Material changes will be notified to you via email or in-app notification at least thirty (30) days before they take effect. 13.2 Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated Terms. --- ## PART B: HEALTH DATA CONSENT **This is a separate consent for the processing of your health data. It is not embedded in the general Terms of Service above. You must provide this consent explicitly and separately.** ### 14. DATA CONTROLLER 14.1 The data controller for your personal data is: **Mezo Health Technologies Limited**, _________________________________, Lagos, Nigeria. Email: privacy@mezohealth.com. 14.2 Our Data Protection Officer can be contacted at: dpo@mezohealth.com. ### 15. WHAT DATA WE COLLECT We collect and process the following categories of personal data: | Category | Examples | Purpose | |----------|---------|---------| | **Identity Data** | Full name, date of birth, gender | Account creation, identity verification | | **Contact Data** | Phone number, email address | Communication, booking confirmations, reminders | | **Health Data** | Medical history, consultation notes, prescriptions, lab results, diagnoses | Facilitating consultations, maintaining health records, enabling continuity of care | | **HMO Data** | HMO provider, plan code, enrollee ID | Processing HMO-covered consultations | | **Payment Data** | Transaction references, amounts paid | Processing payments, generating receipts | | **Usage Data** | Pages visited, searches performed, booking history | Improving the Platform, personalising your experience | ### 16. WHY WE PROCESS YOUR DATA We process your personal data for the following purposes: (a) **To facilitate medical consultations** — sharing your booking details with the Doctor, enabling the Doctor to access relevant health information for your consultation; (b) **To process payments** — collecting and processing consultation fees, HMO claims, and package subscriptions; (c) **To maintain your health records** — storing consultation notes, prescriptions, and lab results for continuity of care; (d) **To send you communications** — booking confirmations, appointment reminders, and important service updates; (e) **To improve the Platform** — analysing usage patterns to improve features and user experience; (f) **To comply with legal obligations** — tax reporting, regulatory compliance, responding to lawful requests from authorities. ### 17. LAWFUL BASIS FOR PROCESSING 17.1 **Health Data:** The lawful basis for processing your health data is your **explicit consent**, given by providing this consent separately and affirmatively (Section 26(2) of the NDPA). 17.2 **Payment Data:** The lawful basis is **performance of a contract** (the booking arrangement) (Section 25(1)(b) of the NDPA). 17.3 **Usage Data:** The lawful basis is **legitimate interest** of the Platform in improving its services (Section 25(1)(f) of the NDPA), subject to your right to object. ### 18. WHO WE SHARE YOUR DATA WITH Your personal data may be shared with: (a) **Doctors** — your booking details and relevant health information, to facilitate your consultation; (b) **Partner Facilities** — your booking time and basic identity information, for reception and check-in; (c) **Payment processors** — Paystack, for processing payments (Paystack is PCI-DSS compliant); (d) **HMO providers** — your HMO details, for processing claims (only if you pay via HMO); (e) **Cloud infrastructure providers** — for secure data storage (all providers are NDPA-compliant); (f) **Law enforcement or regulators** — only where required by law or court order. We will never sell your personal data to third parties. ### 19. DATA RETENTION 19.1 Health records are retained for a minimum of ten (10) years from the date of the last consultation, in accordance with medical record-keeping best practices and the National Health Act 2014. 19.2 Account data is retained for the duration of your account and for six (6) years thereafter (in accordance with the Limitation Act). 19.3 Payment records are retained for six (6) years for tax and audit purposes. ### 20. DATA SECURITY 20.1 All personal data is encrypted at rest using AES-256-GCM encryption. 20.2 All data in transit is protected by TLS 1.2 or higher. 20.3 Access to health data is restricted to authorised personnel on a need-to-know basis. 20.4 We conduct regular security assessments and maintain an incident response plan. ### 21. YOUR RIGHTS Under the NDPA, you have the following rights: (a) **Right of access** — You may request a copy of all personal data we hold about you. We will respond within thirty (30) days. (b) **Right to rectification** — You may request correction of inaccurate personal data. (c) **Right to erasure** — You may request deletion of your personal data, subject to legal retention requirements. Health records may be anonymised rather than deleted where retention is required by law. (d) **Right to restriction** — You may request that we restrict the processing of your personal data in certain circumstances. (e) **Right to data portability** — You may request your health records in a structured, machine-readable format (FHIR R4 compliant where applicable). (f) **Right to object** — You may object to processing based on legitimate interest. (g) **Right to withdraw consent** — You may withdraw your consent to health data processing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us at: privacy@mezohealth.com or through the Platform's settings. ### 22. DATA BREACH NOTIFICATION In the event of a data breach affecting your personal data, we will: (a) Notify the Nigeria Data Protection Commission (NDPC) within seventy-two (72) hours; (b) Notify you without undue delay if the breach is likely to result in a high risk to your rights and freedoms. ### 23. CROSS-BORDER TRANSFERS Your personal data is stored on servers within secure cloud infrastructure. Where data is transferred outside Nigeria, we ensure that appropriate safeguards are in place in compliance with Sections 37-39 of the NDPA. ### 24. RIGHT TO COMPLAIN You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data protection rights have been violated. Contact: www.ndpc.gov.ng. ### 25. CONSENT **By checking the box below / clicking "I Consent" / signing below, you explicitly consent to the collection, processing, and sharing of your personal data, including sensitive health data, for the purposes described in this Part B, in accordance with the Nigeria Data Protection Act 2023.** - [ ] I have read and understood this Health Data Consent - [ ] I consent to the processing of my health data as described above - [ ] I consent to the sharing of my data with Doctors and Facilities for the purpose of my medical consultations **Optional:** - [ ] I consent to receiving marketing communications about health services and offers (you may withdraw this consent at any time) Signature: _________________________ Name: _____________________________ Date: _____________________________