Acceptable Use Policy

This Acceptable Use Policy applies to all users (patients, healthcare professionals, administrators, caregivers, insurance companies and third parties) of all digital health products of SEVENZ Healthcare, which includes websites, mobile application, patient portal, telemedicine platform, and related digital healthcare services.

By accessing or using the digital health products of SEVENZ Healthcare, you agree to comply with this Policy, applicable healthcare regulations, privacy laws, and all relevant local and international laws. Violations of this Policy may result in warnings, suspension or termination of access, reporting to relevant authorities, and legal action where necessary.

Users may access and use digital health products of SEVENZ Healthcare solely for lawful healthcare-related purposes. Permitted activities include:

• booking and attending telemedicine consultations;
• accessing healthcare information and medical records where authorized;
• communicating with licensed healthcare professionals;
• managing appointments, prescriptions, and payments;
• purchasing health insurance, adjudicating claims;
• using patient support and communication tools appropriately; and
• accessing wellness, healthcare, and educational resources provided on the platform

Users must use the platform in accordance with this Policy, SEVENZ Healthcare's Terms of Service, applicable healthcare regulations, and all conditions issued by SEVENZ Healthcare or regulatory authorities.

SEVENZ Healthcare strictly prohibits the misuse of its digital health products. The following activities are expressly forbidden:

3.1. Unlawful Activities

Using the platform for any unlawful, fraudulent, or harmful purpose is prohibited. This includes:

• identity theft or impersonation;
• fraudulent healthcare claims or insurance fraud;
• unlawful sale or distribution of medications;
• sharing false medical information;
• financing illegal activities or money laundering; and
• any conduct that violates Nigerian law or international regulations

Users must not use the platform to facilitate criminal activity, harassment, exploitation, trafficking, or the distribution of prohibited or illegal content.

3.2. Security Violations

Users must not attempt unauthorized access to any SEVENZ Healthcare digital health product, account, database, or infrastructure.

Prohibited activities include:

• hacking or attempting to breach platform security;
• probing, scanning, or testing system vulnerabilities without authorization;
• distributing malware, viruses, trojans, or malicious code;
• using stolen login credentials or unauthorized accounts;
• disrupting telemedicine services or system operations; and
• launching denial of service or similar attacks.
• social engineering / phishing, impersonating staff or patients to gain access
• man-in-the-middle attacks, intercepting communications between users and the platform
• API abuse scraping, excessive automated requests, or exploiting undocumented endpoints
• privilege escalation, using a legitimate account to access resources beyond your permission level
• session hijacking, stealing or reusing another user's active session token
• unauthorised data exfiltration, downloading or copying patient records beyond legitimate use isn't explicitly named
• data manipulation, tampering with medical records, test results, or prescriptions (this is arguably the most dangerous threat in an EMR context)
• re-identification of anonymised data, attempting to reverse anonymisation on any datasets

Any action that compromises platform security or patient safety may result in immediate suspension and legal reporting.

3.3. Misuse of Healthcare Services

Users must not misuse telemedicine or healthcare services provided by SEVENZ Healthcare.

These include:

• falsifying medical information or health records;
• impersonating licensed healthcare professionals;
• obtaining prescriptions fraudulently;
• using another patient's account or medical records without authorization;
• recording consultations without consent where prohibited by law; and
• interfering with healthcare delivery or emergency response services.

Healthcare professionals using the platform comply with all applicable professional ethics and licensing obligations.

3.4. Content Submission and Communications

When submitting or transmitting content through the platform, users must ensure such content is lawful, respectful, and appropriate.

Prohibited content includes content that is:

• defamatory, abusive, hateful, or discriminatory;
• obscene, pornographic, or sexually explicit;
• misleading or fraudulent;
• threatening or harassing;
• infringing on intellectual property rights; or
• harmful to patients, healthcare workers, or the public

Users must not send spam, phishing messages, unsolicited advertisements, or deceptive communications. False identities or misleading contact information must not be used.

SEVENZ Healthcare reserves the right to remove or restrict any content that violates this Policy.

3.5. Intellectual Property Abuse

Users must respect intellectual property rights related to SEVENZ Healthcare and third parties.

You may not:

• copy or redistribute platform materials without authorization;
• upload copyrighted content without permission;
• misuse trademarks, branding, software, or medical resources; or
• reverse-engineer or unlawfully reproduce any part of the platform.

3.6. Privacy and Data Misuse

Users must handle all personal, medical, and financial information in compliance with the Nigeria Data Protection Act (NDPA) 2023 and applicable healthcare privacy laws.

Users must not:

• access another person's medical records without authorization;
• harvest or scrape personal or patient data;
• disclose confidential health information unlawfully;
• use patient information for unauthorized marketing; or
• engage in phishing, identity theft, or deceptive data collection practices.

Patient confidentiality and data protection are critical obligations on all digital health products of SEVENZ Healthcare.

3.7. Automation and Unauthorized Access Tools

Automated access to the platform is prohibited unless expressly authorized by SEVENZ Healthcare.

Users may not use:

• bots, crawlers, scrapers, or automated scripts;
• unauthorized API connections; or
• automated systems that overload or disrupt platform operations.

Bulk automated actions designed to imitate human activity or interfere with healthcare operations are prohibited.

3.8. Abuse of Infrastructure

Users must not engage in activities that degrade platform performance or negatively affect other users.

This includes:

• excessive system abuse or spam;
• disrupting consultations or appointments;
• interfering with platform operations;
• harassment or threats toward staff, healthcare professionals, or users; and
• attempts to bypass platform safeguards or restrictions.

3.9. Compliance with Laws and Regulations

Users must comply with all applicable laws, healthcare regulations, cybersecurity laws, and data protection requirements.

This includes compliance with:

• the Nigeria Data Protection Act (NDPA) 2023;
• Cybercrimes (Prohibition, Prevention, etc.) Act;
• healthcare licensing and ethics regulations; and
• any other applicable local or international healthcare standards.

Users agree to cooperate with lawful investigations where required.

SEVENZ Healthcare reserves the right to enforce this Policy at its sole discretion. Violations may result in:

4.1. Investigation

SEVENZ Healthcare may monitor, review, log, and investigate suspicious activities, platform usage, and security incidents.

4.2. Account Restrictions or Suspension

Depending on the severity of the violation, SEVENZ Healthcare may issue warnings, restrict access, suspend accounts, or permanently terminate access to the platform.

4.3. Content Removal

Any content that violates this Policy may be removed without notice.

4.4. Compliance with Laws and Regulations

SEVENZ Healthcare may cooperate with law enforcement agencies, healthcare regulators, and data protection authorities where necessary. Violations involving fraud, cybersecurity offenses, unauthorized access, or unlawful disclosure of patient information may result in civil or criminal liability. Users may also be held responsible for any damages, losses, or liabilities arising from their violation of this Policy.

SEVENZ Healthcare may update this Acceptable Use Policy from time to time to reflect operational, legal, technological, or regulatory changes.

Any updates become effective immediately upon publication on the platform. Continued use of the platform after updates constitutes acceptance of the revised Policy.

Users are encouraged to review this Policy periodically.

By accessing or using SEVENZ Healthcare's digital health products, you acknowledge that you have read, understood, and agreed to comply with this Acceptable Use Policy and all related terms and conditions.