Privacy Policy

Last updated: 17 July 2026

1. Introduction

This Privacy Policy explains how Locumspace ("Practices Plus", "we", "us", "our") collects, uses, discloses, and protects personal data when you use the Practices Plus platform (the "Service"). It should be read together with our Terms of Service.

Because our users are based in Nigeria and around the world — including the United Kingdom, United States, Australia, Canada, and the United Arab Emirates — we apply the Nigeria Data Protection Act 2023 and its NDPR framework as our baseline data protection standard across the Service, and we additionally apply GDPR-equivalent protections and rights to users based in the United Kingdom and the European Union, as described in Section 8.

2. Data We Collect

The table below summarises the categories of personal data we collect, why we collect them, and how long we generally keep them. Specific retention periods are also referenced throughout this Policy and in our Terms of Service.

Data category

Examples

Purpose

Retention

Account information

Name, email, phone, password (hashed), country of interest

Create and manage your account, provide the Service

Retained while your account is active; deleted on account closure, subject to legal retention needs

Identity & credential documents

Passport, degree certificates, licensing documents you upload

Support country-access features and consultations you have paid for

Retained only while tied to an active country-access unlock or an upcoming/recent consultation; deleted once that link ends

Payment information

Transaction records, amount, currency, payment status

Process payments, provide receipts, prevent fraud (processed via Paystack)

Retained as required for accounting and legal/tax obligations

Consultation booking data

Booking time, time zone, advisor assigned, calendar sync data

Schedule and deliver consultations, send reminders

Retained for the service history of your account; recordings only with per-session consent

Consultation recordings

Audio/video of a session, only if you consent

Internal quality assurance and advisor training

Retained only where consented; deleted per our internal retention schedule

Language assessment audio

Your recorded speaking-task responses

Generate your automated practice score

Deleted immediately once scoring is complete

Usage & device data

IP address, browser type, pages visited, log data

Maintain security, diagnose issues, improve the Service

Retained for a limited operational period

3. How We Use Your Information

We use the personal data described above to:

Create, authenticate, and manage your account
Provide the country guides, source registry, consultation booking, and language assessment features you have unlocked or purchased
Process payments and maintain accurate financial and tax records
Schedule, deliver, and remind you of booked consultations, including syncing with Google Calendar where you authorise this
Communicate with you about your account, purchases, and material changes to the Service
Maintain the security and integrity of the Service and prevent fraud or misuse
Comply with our legal, regulatory, and tax obligations

We do not use your identity or credential documents, consultation content, or language assessment recordings for any purpose beyond delivering the specific feature you used them for.

4. Legal Basis for Processing

Where applicable law requires a legal basis for processing, we rely on one or more of the following: your consent (for example, before recording a consultation session or accessing your calendar); the necessity of processing to perform our contract with you (for example, delivering country access or a booked consultation); our legitimate interests in operating and securing the Service; and compliance with a legal obligation (for example, financial record-keeping).

5. How We Share Information

We do not sell your personal data. We share personal data only in the following circumstances:

With Paystack, our payment processor, to the extent necessary to process a transaction
With Google, where you authorise Google Calendar integration for consultation scheduling
With our email delivery provider, to send account, booking, and reminder communications
With Practices Plus advisors, limited to the information needed to conduct a consultation you have booked
Where required by law, regulation, court order, or to protect the rights, property, or safety of Practices Plus, our users, or the public
With a successor entity in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections

Separate products: Practices Plus and Locumspace are operated as fully separate products with separate accounts and separate data. We do not share personal data between Practices Plus and Locumspace, and holding an account on one product does not give that product access to your data on the other.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy. In particular:

Identity and credential documents (e.g. passports, degree certificates) are retained only while they remain tied to an active country-access unlock or an upcoming or recent consultation, and are deleted once that link ends.
Language assessment audio recordings are deleted immediately once automated scoring is complete; we do not retain a copy.
Consultation session recordings are made only with your explicit, per-session consent and are retained solely for internal quality-assurance and training purposes, subject to our internal retention schedule.
Account and transaction records are retained for as long as your account is active and thereafter as required to meet our legal, accounting, and tax obligations.

7. Consultation Recording and Consent

Consultation sessions may be recorded for quality assurance and advisor training. Recording never happens by default: we request and record your explicit consent separately before each individual session. You may decline recording for any session, and doing so will not affect your ability to receive the consultation you booked.

8. Your Rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your personal data, subject to any legal or contractual retention requirements
Request a portable copy of certain personal data you have provided to us
Object to, or request that we restrict, certain processing of your data
Withdraw consent at any time where processing is based on your consent (for example, consultation recording or calendar access), without affecting the lawfulness of processing carried out before withdrawal

If you are based in the United Kingdom or the European Union, these rights are provided to you on a basis equivalent to those available under the UK GDPR and EU GDPR. If you are based in Nigeria or elsewhere, these rights are provided in line with the Nigeria Data Protection Act 2023.

To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before actioning a request.

9. Data Storage and Security

Your data is stored in our backend data platform, together with industry-standard technical and organisational security measures, including encryption in transit and access controls limiting who within our team can view sensitive data such as uploaded documents. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored by the Service.

10. International Data Transfers

Because our users and infrastructure providers are located in multiple countries, your data may be processed or stored outside your home country, including in Nigeria. Where we transfer personal data of UK or EU users internationally, we take reasonable steps to ensure an equivalent level of protection is applied, consistent with the commitments described in Section 8.

11. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Service.

12. Children's Privacy

The Service is intended for licensed and in-training healthcare professionals and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Contact Us

If you have questions about this Privacy Policy, or wish to exercise any of the rights described in Section 8, please contact us at: info@locumspace.co

14. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide reasonable notice (for example, by email or an in-app notice) before the changes take effect. The "Last updated" date at the top of this Policy indicates when it was last revised.

Questions about this Policy?