Privacy Policy

Spark Blood Nigeria ("Spark Blood", "we", "us") operates an emergency blood matching platform that connects hospital coordinators, voluntary donors, and people who need blood across Nigeria. We are committed to handling your personal data in line with the Nigeria Data Protection Act, 2023 (NDPA) and related regulations issued by the Nigeria Data Protection Commission (NDPC).

• Donor information — name, phone, email, blood type, sex, date of birth, location, eligibility-quiz answers, and donation history.
• Receiver / requester information — name, phone, hospital, blood type and units needed, urgency, and (where you choose to add it) clinical notes.
• Coordinator information — name, email, phone, role, assigned hospital and state, and audit logs of actions taken.
• Health passport information — voluntary health/eligibility entries the donor adds to their profile.
• Technical data — device/browser, IP address, push-notification tokens, and basic usage analytics needed to operate the service.

• To match blood requests with eligible donors and deliver alerts (SMS, in-app, push).
• To let coordinators run requests, confirm donations and maintain a bag-to-bedside audit trail.
• To verify identity and eligibility, and prevent abuse of the platform.
• To improve the service, train coordinators, and respond to your questions.
• To comply with legal obligations and respond to lawful requests by Nigerian regulators.

We do not sell your personal data. Ever.

We rely on one or more of the following lawful bases under the NDPA:

• Consent — when you register as a donor or submit a story.
• Vital interests — to protect a person's life in an emergency blood request.
• Contract — to provide coordinator and partner accounts.
• Legitimate interests — to keep the service safe, prevent fraud, and improve it.

• You — through your account dashboard.
• Hospital coordinators — only data relevant to a request they manage.
• Matched donors — receive minimum-necessary request info (hospital name, type, urgency) needed to respond.
• Our service providers (SMS gateway, hosting, analytics) under contract and only as needed to operate the service.
• Nigerian regulators or law enforcement when legally compelled.

We use row-level access control, encrypted transport (HTTPS), role-based permissions for coordinators, and audit logging for sensitive actions. No internet service is perfectly secure, but we follow industry-standard practices and review them regularly.

Donor and request records are retained as long as your account is active and for a reasonable period afterwards to support audit, public-health reporting and dispute resolution. You can request deletion at any time, subject to legal retention obligations.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion (subject to legal/operational retention).
• Withdraw consent at any time.
• Object to certain processing or restrict it.
• Lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these rights, contact us via the contact page.

Spark Blood is not intended for users under 18. Donor registration requires that you meet the minimum age for blood donation under Nigerian law and the policies of the collecting hospital.

We may update this policy as the service evolves or as the law changes. We'll update the "Last updated" date above and, for material changes, notify registered users in-app or by email.

Data protection questions: reach us through the contact page.