Privacy Policy

1. Information we collect

We may collect:

• Your first name and email address when you join D4R Insider or request a D4R resource.
• Information you provide when contacting us, including the content of your message.
• Website and device information, such as pages visited, interactions with the site, browser type, device type, approximate location, IP address, referral source, and cookie identifiers.
• Email engagement information, such as whether an email was delivered, opened, or clicked, where this is enabled by our email service provider.

Please do not send sensitive personal, health, financial, or confidential information through the website unless we specifically ask for it and provide a suitable secure method.

2. How we use your information

We use personal data to:

• Send the D4R Healthcare Design Assessment Checklist or other resources you request.
• Send D4R Insider emails, including healthcare-design insights, podcast updates, research, resources, and occasional announcements.
• Respond to enquiries.
• Understand how visitors use the website and improve its content, performance, and user experience.
• Protect the website, prevent misuse, and comply with legal obligations.

We do not sell personal information.

3. Our lawful basis

Where applicable, we process personal data because:

• You have given consent—for example, when you choose to subscribe to D4R Insider or request a resource.
• Processing is necessary to provide something you requested, such as sending the checklist.
• We have a legitimate interest in operating, securing, analysing, and improving D4R, provided that interest does not override your rights.
• We must meet a legal obligation.

You can withdraw consent for marketing emails at any time by using the unsubscribe link in an email or contacting us.

4. Email subscriptions and resources

D4R Insider and the free-checklist form are separate signup paths. If you join D4R Insider, we use your details to send ongoing D4R communications. If you request the checklist, we use your details to send the requested resource and may send occasional related D4R updates as described on the form.

Our email delivery and audience-management provider may process your information on our behalf. [Mailchimp.]

Every marketing email should include an unsubscribe option. Unsubscribing stops future marketing messages, but we may retain limited information to record your request and meet legal obligations.

5. Service providers and sharing

We use trusted providers to help operate the website, analyse usage, host services, and deliver email communications. These may include:

• Website hosting and publishing services.
• Website analytics providers, including PostHog and Pirsch.
• Email marketing and delivery providers. [Mailchimp.]

We share personal data only as necessary for these providers to perform services for us, to comply with law, to protect rights and safety, or in connection with a business reorganisation. We do not permit service providers to use personal data for their own unrelated marketing.

6. Analytics and cookies

We use cookies and similar technologies to operate the website and understand its use. Analytics tools may collect information about pages viewed, clicks, device and browser information, approximate location, and referral source.

7. International transfers

Our service providers may process personal data outside Nigeria or the country in which you live. Where this happens, we will take reasonable steps to ensure appropriate safeguards are in place and that personal data remains protected in line with applicable law.

8. Retention

We keep personal data only for as long as needed for the purposes described in this Policy.

• Newsletter information: while you remain subscribed, and for [3 months] after unsubscribing, unless a longer period is required by law.
• Checklist-request information: for the period needed to deliver the resource, manage related communications, and meet record-keeping obligations.
• Enquiries: for [3 month] after the enquiry is resolved, unless we need to keep it longer for legal or operational reasons.
• Analytics information: according to the settings and retention periods of the relevant analytics provider.

We may retain anonymised or aggregated information that no longer identifies you.

9. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. No online service can guarantee absolute security; please use care when sending information online.

10. Your rights

Depending on applicable law, you may have the right to:

• Request access to your personal data.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your personal data in certain circumstances.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request a portable copy of your information where applicable.
• Complain to the Nigeria Data Protection Commission or another relevant regulator.

To make a request, contact us at adeyemiadelowo.aa@gmail.com. We may need to verify your identity before responding.

11. Children

D4R is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date above. We encourage you to review this Policy periodically.

13. Contact us

For privacy questions or requests, contact:

Cedarscape consult limited / Designed 4 Recovery
Email: adeyemiadelowo.aa@gmail.com