How your personal data, identity documents, and application records are encrypted, stored, and protected.
Company Name: DOOTOR ENTERPRISES
Website: https://dootor-enterprises.com
Email: support@dootor-enterprises.com
Effective Date: 29th September, 2026
Last Updated: 29th September, 2026
DOOTOR ENTERPRISES (“DOOTOR ENTERPRISES”, “we”, “us”, or “our”) is committed to protecting the privacy, confidentiality, integrity, and security of the personal information entrusted to us.
We recognise privacy and data protection as important rights and are committed to processing personal data lawfully, fairly, transparently, securely, and responsibly.
This Data Protection and Privacy Policy explains how DOOTOR ENTERPRISES collects, uses, stores, processes, shares, transfers, retains, and protects personal data relating to customers, applicants, website visitors, employees, contractors, representatives, business partners, service providers, and other individuals who interact with our services.
This Policy is intended to comply with applicable Nigerian privacy and data protection requirements, including:
i. The Constitution of the Federal Republic of Nigeria 1999, as amended;
ii. The Nigeria Data Protection Act 2023;
iii. Applicable Nigeria Data Protection Commission regulations, guidelines, directives, and implementation requirements;
iv. Applicable cybersecurity, identity-management, electronic transaction, and information-security requirements; and
v. Other applicable Nigerian laws and regulations relating to the protection and processing of personal information.
This Policy applies to personal data collected or processed by DOOTOR ENTERPRISES through:
i. Our website at https://dootor-enterprises.com;
ii. Our client portals and dashboards;
iii. Online application systems;
iv. Service-request forms;
v. Physical application forms;
vi. Email communications;
vii. Telephone communications;
viii. Messaging platforms;
ix. Customer-support channels;
x. Payment systems;
xi. Third-party integrations;
xii. Service-delivery systems;
xiii. Administrative systems; and
xiv. Any other platform, application, system, or communication channel operated by or on behalf of DOOTOR ENTERPRISES.
This Policy applies whether personal information is collected electronically, physically, directly from you, automatically through our systems, or from an authorised third party.
Depending on the particular service being provided, DOOTOR ENTERPRISES may act as a Data Controller, Data Processor, or both.
Where DOOTOR ENTERPRISES determines the purposes and methods for processing personal data, we act as the Data Controller.
Where we process personal data solely on behalf of another organisation in accordance with lawful instructions, we act as a Data Processor.
Where required, our relationships with third-party Data Controllers, Data Processors, service providers, and partners may be governed by appropriate Data Processing Agreements, confidentiality obligations, and information-security requirements.
Depending on the service requested and your relationship with DOOTOR ENTERPRISES, we may collect and process different categories of personal data.
This may include:
i. Full name;
ii. Date of birth;
iii. Gender, where necessary;
iv. Nationality;
v. Country of residence;
vi. State of origin;
vii. Local Government Area;
viii. Government-issued identification information;
ix. Passport information;
x. National Identity Number information, where lawfully required;
xi. Identity-document numbers;
xii. Photographs;
xiii. Signatures; and
xiv. Other information reasonably required to confirm or verify identity.
We may collect:
i. Residential address;
ii. Postal or correspondence address;
iii. Email address;
iv. Telephone number;
v. Emergency contact details; and
vi. Other contact information necessary for communication and service delivery.
Where you create an account with DOOTOR ENTERPRISES, we may process:
i. Username;
ii. Secure authentication credentials;
iii. Account profile information;
iv. Login history;
v. Account activity;
vi. Account preferences;
vii. Security settings;
viii. Role and permission information; and
ix. Authentication records.
Passwords are expected to be stored using appropriate security mechanisms such as secure password hashing and are not intended to be stored in readable plain-text format.
Where you apply for or request a service from DOOTOR ENTERPRISES, we may process information including:
i. Service selected;
ii. Application information;
iii. Application forms;
iv. Supporting documents;
v. Uploaded files;
vi. Reference numbers;
vii. Tracking numbers;
viii. Application status;
ix. Service history;
x. Communication history;
xi. Appointment information;
xii. Processing notes;
xiii. Administrative information; and
xiv. Other information necessary to provide the requested service.
Where payments are required, we may process:
i. Transaction reference;
ii. Payment amount;
iii. Payment status;
iv. Billing information;
v. Invoice information;
vi. Payment date;
vii. Payment-method information;
viii. Refund information; and
ix. Other relevant transaction details.
Payment processing may be handled by authorised payment gateways, banks, financial institutions, or other payment-service providers.
DOOTOR ENTERPRISES will endeavour not to store complete payment-card information where such storage is not necessary for the provision of our services.
When you use our website or online platforms, we may automatically collect technical information such as:
i. Internet Protocol address;
ii. Browser type;
iii. Device type;
iv. Operating system;
v. Device identifiers;
vi. Login date and time;
vii. Session information;
viii. Website pages visited;
ix. Access logs;
x. Security logs;
xi. Error logs;
xii. Cookie information; and
xiii. Other technical information required for security, analytics, and service improvement.
Some services may require the processing of sensitive personal data.
Where sensitive personal information is required, DOOTOR ENTERPRISES will apply appropriate safeguards and will only process such information where an appropriate legal basis exists.
We will endeavour to limit sensitive-data processing to what is reasonably necessary for the provision of the relevant service.
DOOTOR ENTERPRISES may collect personal data:
i. Directly from you;
ii. When you create an account;
iii. When you register on our website;
iv. When you submit an application;
v. When you request a service;
vi. When you upload a document;
vii. When you contact customer support;
viii. When you communicate with us by email, telephone, or other channels;
ix. When you make a payment;
x. When you use our website;
xi. From an authorised representative acting on your behalf;
xii. From authorised third-party service providers;
xiii. From government or regulatory platforms where legally permitted;
xiv. From publicly available sources where lawful; and
xv. Through other lawful and legitimate means.
DOOTOR ENTERPRISES will not knowingly obtain personal information through fraudulent, misleading, or unlawful means.
We may process personal information for purposes including:
i. Creating and managing user accounts;
ii. Processing service applications;
iii. Providing requested services;
iv. Verifying identity;
v. Managing applications and documents;
vi. Monitoring application progress;
vii. Processing payments;
viii. Issuing payment confirmations;
ix. Providing customer support;
x. Communicating with customers;
xi. Sending service notifications;
xii. Sending application-status updates;
xiii. Managing appointments;
xiv. Preventing fraud;
xv. Preventing unauthorised access;
xvi. Protecting our systems;
xvii. Managing customer relationships;
xviii. Maintaining business records;
xix. Conducting audits;
xx. Improving our website and services;
xxi. Resolving complaints and disputes;
xxii. Meeting regulatory requirements;
xxiii. Complying with legal obligations;
xxiv. Establishing, exercising, or defending legal claims;
xxv. Managing contractual relationships;
xxvi. Performing risk assessments; and
xxvii. Carrying out other lawful purposes communicated to you.
We will not intentionally process personal information for purposes that are incompatible with the original purpose for which the information was collected unless permitted by applicable law or authorised by the individual concerned.
DOOTOR ENTERPRISES will process personal data only where an appropriate legal basis exists.
Depending on the circumstances, processing may be based on:
i. Consent;
ii. Performance of a contract;
iii. Steps taken at your request before entering into a contract;
iv. Compliance with legal obligations;
v. Protection of the vital interests of an individual;
vi. Performance of a task carried out in the public interest where applicable; or
vii. Legitimate interests pursued by DOOTOR ENTERPRISES or another party, provided those interests do not improperly override the rights and freedoms of the individual.
Where we rely on consent, consent should be freely given, informed, specific, and appropriately communicated.
Where legally applicable, you may withdraw your consent at any time.
Withdrawal of consent does not automatically affect the lawfulness of processing carried out before the withdrawal.
DOOTOR ENTERPRISES is committed to ensuring that personal data is:
i. Processed lawfully, fairly, and transparently;
ii. Collected for specified and legitimate purposes;
iii. Used only for appropriate purposes;
iv. Adequate and relevant;
v. Limited to what is reasonably necessary;
vi. Accurate and kept up to date where necessary;
vii. Retained only for as long as reasonably required;
viii. Protected against unauthorised access, loss, misuse, disclosure, alteration, or destruction; and
ix. Processed in a manner that supports accountability and compliance.
DOOTOR ENTERPRISES will endeavour to collect only the personal information that is reasonably necessary for a particular purpose.
Our employees, contractors, representatives, and authorised personnel should not request unnecessary personal information unrelated to the service being provided.
We take reasonable steps to ensure that personal data in our possession is accurate and appropriately maintained.
Users are responsible for providing accurate information and are encouraged to update their information whenever it changes.
Where inaccurate information is identified, reasonable steps may be taken to correct or update it.
DOOTOR ENTERPRISES may disclose personal information to authorised third parties where necessary for service delivery or compliance purposes.
These parties may include:
i. Government ministries, departments, and agencies;
ii. Authorised identity-verification organisations;
iii. Payment-service providers;
iv. Banks;
v. Financial institutions;
vi. Cloud-hosting providers;
vii. IT service providers;
viii. Communication-service providers;
ix. Data Protection Compliance Organisations;
x. Professional advisers;
xi. Auditors;
xii. Contractors;
xiii. Business partners;
xiv. Regulatory authorities;
xv. Law-enforcement authorities where lawfully required; and
xvi. Other authorised organisations necessary for the provision of requested services.
Where appropriate, third-party access to personal information may be governed by contractual obligations, confidentiality provisions, Data Processing Agreements, and security requirements.
DOOTOR ENTERPRISES does not intend to sell personal data to third parties.
Some of our technology, hosting, cloud, communication, or service providers may operate outside Nigeria.
Where personal data is transferred outside Nigeria, DOOTOR ENTERPRISES will endeavour to implement appropriate safeguards in accordance with applicable Nigerian data protection requirements.
Where required, international transfers may be supported by recognised legal mechanisms, contractual safeguards, adequacy arrangements, regulatory requirements, or valid consent.
DOOTOR ENTERPRISES takes reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, misuse, alteration, destruction, or loss.
Security measures may include:
i. Secure HTTPS and TLS communications;
ii. Secure password hashing;
iii. Role-Based Access Control;
iv. User authentication;
v. Multi-factor authentication where appropriate;
vi. Least-privilege access;
vii. Firewall protection;
viii. Secure databases;
ix. Activity logging;
x. Audit trails;
xi. Security monitoring;
xii. Secure backups;
xiii. File-access controls;
xiv. Session controls;
xv. Malware protection;
xvi. Vulnerability management;
xvii. Secure software-development practices;
xviii. Staff confidentiality obligations;
xix. Periodic security reviews; and
xx. Other measures appropriate to the nature of the information processed.
Access to personal data should be limited to authorised persons with a legitimate business need.
DOOTOR ENTERPRISES will endeavour to maintain procedures for detecting, investigating, containing, documenting, and responding to personal-data breaches.
Where a data breach creates a risk to the rights and freedoms of individuals, we will take appropriate actions in accordance with applicable Nigerian law and regulatory requirements.
Where legally required, DOOTOR ENTERPRISES may notify the Nigeria Data Protection Commission and affected individuals.
We will also take reasonable steps to:
i. Contain the incident;
ii. Investigate the cause;
iii. Protect affected systems;
iv. Preserve relevant evidence;
v. Mitigate potential harm;
vi. Prevent recurrence; and
vii. Cooperate with appropriate regulatory or law-enforcement authorities.
DOOTOR ENTERPRISES will not retain personal information indefinitely.
Personal information may be retained for as long as necessary to:
i. Provide requested services;
ii. Complete applications;
iii. Maintain transaction records;
iv. Meet legal requirements;
v. Meet regulatory requirements;
vi. Meet taxation and accounting obligations;
vii. Prevent fraud;
viii. Resolve disputes;
ix. Respond to complaints;
x. Maintain audit trails; or
xi. Establish, exercise, or defend legal claims.
Where personal data is no longer reasonably required, it may be securely deleted, anonymised, destroyed, or otherwise disposed of in accordance with applicable requirements.
Where our services involve children or persons who may not have legal capacity to provide valid consent, DOOTOR ENTERPRISES will endeavour to apply additional safeguards.
Where required, appropriate consent or authorisation may be obtained from a parent, guardian, or legally authorised representative.
Personal information relating to children will not knowingly be used for inappropriate marketing, exploitation, or unlawful profiling.
The DOOTOR ENTERPRISES website may use cookies and similar technologies.
Cookies may be used to:
i. Maintain login sessions;
ii. Improve website security;
iii. Remember user preferences;
iv. Improve website functionality;
v. Analyse website traffic;
vi. Detect fraudulent activity;
vii. Detect suspicious access; and
viii. Improve user experience.
Where legally required, users may be provided with options to manage non-essential cookies.
Users can also control cookies through their browser settings.
Disabling some cookies may affect certain website functionality.
DOOTOR ENTERPRISES may send marketing or promotional communications where we have an appropriate lawful basis.
Where consent is required, we will seek consent before sending such communications.
Users may unsubscribe from marketing communications through available unsubscribe mechanisms or by contacting:
support@dootor-enterprises.com
Unsubscribing from marketing communication may not prevent us from sending important transactional, security, application-related, or service-related communications.
Where DOOTOR ENTERPRISES uses automated technologies that significantly affect an individual's rights or interests, we will endeavour to comply with applicable legal requirements concerning automated decision-making.
Where legally applicable, affected individuals may have rights to:
i. Request relevant information;
ii. Request human intervention;
iii. Challenge certain automated decisions; or
iv. Object to qualifying automated processing.
Subject to applicable Nigerian law and legitimate legal limitations, individuals whose personal information is processed by DOOTOR ENTERPRISES may have rights including:
i. The right to be informed about how personal data is processed;
ii. The right to request access to personal data;
iii. The right to request correction of inaccurate personal data;
iv. The right to request completion of incomplete personal data;
v. The right to request deletion or erasure where legally applicable;
vi. The right to withdraw consent where processing is based on consent;
vii. The right to object to certain processing activities;
viii. The right to request restriction of processing where applicable;
ix. The right to data portability where applicable;
x. Rights concerning qualifying automated decision-making;
xi. The right to lodge a complaint with the Nigeria Data Protection Commission; and
xii. Other rights recognised under applicable Nigerian data protection laws.
Some rights may be subject to legal restrictions, exemptions, record-retention requirements, or identity-verification requirements.
To exercise your privacy or data-protection rights, contact DOOTOR ENTERPRISES at:
Email: support@dootor-enterprises.com
Website: https://dootor-enterprises.com
Your request should clearly explain:
i. Your name;
ii. Relevant account or application information;
iii. The right you wish to exercise; and
iv. Sufficient information to allow us to identify the relevant personal-data records.
For security purposes, we may require reasonable proof of identity before releasing or modifying personal information.
Requests will be handled in accordance with applicable Nigerian data protection requirements.
Privacy and data-protection enquiries may be directed to:
DOOTOR ENTERPRISES
Privacy and Data Protection Contact
Email: support@dootor-enterprises.com
Website: https://dootor-enterprises.com
Where required by applicable law or determined appropriate by DOOTOR ENTERPRISES, a Data Protection Officer may be appointed to oversee relevant privacy and data-protection activities.
Responsibilities may include:
i. Monitoring compliance;
ii. Advising management;
iii. Supporting privacy assessments;
iv. Managing data-subject requests;
v. Supporting breach investigations;
vi. Coordinating privacy training;
vii. Advising on Data Protection Impact Assessments;
viii. Maintaining privacy documentation; and
ix. Liaising with regulatory authorities where appropriate.
Where a proposed processing activity may create a high risk to individuals, DOOTOR ENTERPRISES may conduct a Data Protection Impact Assessment in accordance with applicable requirements.
A Data Protection Impact Assessment may consider:
i. The purpose of processing;
ii. Categories of information involved;
iii. Necessity of processing;
iv. Proportionality;
v. Risks to individuals;
vi. Access controls;
vii. Data-retention arrangements;
viii. Security safeguards; and
ix. Measures for mitigating identified risks.
DOOTOR ENTERPRISES aims to consider privacy and data-protection requirements during the design, development, procurement, implementation, and maintenance of systems that process personal information.
Where reasonably practicable, systems should be configured to process only the amount of personal information necessary for their intended purpose.
Employees, staff members, contractors, consultants, and other authorised persons who have access to personal information are expected to:
i. Maintain confidentiality;
ii. Access information only where authorised;
iii. Process information only for legitimate business purposes;
iv. Protect usernames and passwords;
v. Protect customer documents;
vi. Report suspected breaches;
vii. Follow access-control requirements;
viii. Avoid unauthorised copying or downloading of data;
ix. Avoid unauthorised disclosure; and
x. Comply with applicable company privacy and cybersecurity policies.
Unauthorised misuse, disclosure, destruction, or alteration of personal data may result in disciplinary, contractual, regulatory, or legal action.
Our website may contain links to websites, applications, platforms, payment gateways, or services operated by third parties.
DOOTOR ENTERPRISES is not automatically responsible for the privacy practices of independently operated third-party services.
Users should review the privacy notices of third-party websites and platforms before submitting personal information to them.
DOOTOR ENTERPRISES may maintain appropriate records relating to personal-data processing.
We may periodically conduct:
i. Privacy reviews;
ii. Data-protection assessments;
iii. Security reviews;
iv. Access-control reviews;
v. Risk assessments;
vi. Staff awareness programmes;
vii. Policy reviews; and
viii. Other compliance activities.
We will endeavour to cooperate with lawful requests from competent regulatory authorities.
If you believe that DOOTOR ENTERPRISES has processed your personal data improperly, unlawfully, or contrary to this Privacy Policy, please contact us at:
DOOTOR ENTERPRISES
Email: support@dootor-enterprises.com
Website: https://dootor-enterprises.com
We will endeavour to review legitimate privacy complaints and take appropriate corrective measures where necessary.
You may also have the right to lodge a complaint directly with the Nigeria Data Protection Commission (NDPC) in accordance with applicable Nigerian law.
DOOTOR ENTERPRISES may update this Privacy Policy from time to time.
Updates may be made because of:
i. Changes to Nigerian laws;
ii. Changes to NDPC regulations or guidance;
iii. Changes to our services;
iv. Changes to technology;
v. Changes to our security arrangements;
vi. Introduction of new services;
vii. Changes to third-party providers; or
viii. Changes to our data-processing activities.
The latest version of this Policy will be published on:
https://dootor-enterprises.com
The date of the latest revision will be displayed at the top of this Policy.
By accessing the DOOTOR ENTERPRISES website, creating an account, submitting an application, requesting a service, uploading documentation, or otherwise providing personal information to us, you acknowledge that you have been provided with an opportunity to review this Privacy Policy.
Where consent is required as the legal basis for a particular processing activity, DOOTOR ENTERPRISES will seek appropriate consent.
Consent will not automatically be treated as the legal basis for every processing activity where another lawful basis applies.
Where processing is based on consent, you may withdraw your consent where legally permitted by contacting:
support@dootor-enterprises.com
Where appropriate, the following statement may be presented on DOOTOR ENTERPRISES online forms:
“I acknowledge that I have read the DOOTOR ENTERPRISES Privacy Policy and understand how my personal information may be collected, processed, stored, and protected for the purposes of providing the service I have requested. Where my consent is required as the lawful basis for processing, I consent to the processing of my personal information in accordance with the Privacy Policy.”
The Privacy Policy should be linked directly to this statement.
Where customers upload passports, identification documents, certificates, photographs, application forms, National Identity Number-related documents, or other supporting documents, the following notice may be displayed:
“Documents uploaded through DOOTOR ENTERPRISES are collected solely for the purpose of processing, verifying, managing, and completing the service requested by you and for meeting applicable legal or regulatory requirements. Access to uploaded documents is restricted to authorised personnel and authorised service providers where necessary.”
DOOTOR ENTERPRISES considers the responsible handling of personal information an important part of maintaining the trust of our customers, applicants, employees, partners, and other stakeholders.
We are committed to:
i. Protecting personal information;
ii. Respecting data-subject rights;
iii. Maintaining appropriate access controls;
iv. Implementing reasonable technical and organisational security measures;
v. Promoting staff awareness of data-protection responsibilities;
vi. Responding appropriately to privacy incidents;
vii. Reviewing our privacy practices; and
viii. Complying with applicable Nigerian data-protection requirements.
For questions, requests, complaints, or concerns relating to this Privacy Policy or the processing of your personal information, please contact:
DOOTOR ENTERPRISES
Email: support@dootor-enterprises.com
Website: https://dootor-enterprises.com
Privacy & Data Protection Contact: support@dootor-enterprises.com
© 2026 DOOTOR ENTERPRISES. All Rights Reserved.
DOOTOR ENTERPRISES – Committed to Privacy, Security, Confidentiality, and Responsible Data Protection.
