Privacy Policy

AmbuHub (“we,” “us,” or “our”) operates the website www.ambuhub.com (the “Site”) and related services that connect users with ambulance and emergency medical transport services (the “Services”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or use our Services.

By accessing or using AmbuHub, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Site or Services.

AmbuHub is operated by Ambulance Hub, a company registered in Nigeria & Ghana, with its registered address in Lagos & Accra.

This Policy applies to information collected through:

• The AmbuHub website (www.ambuhub.com)
• AmbuHub mobile applications (if applicable)
• Customer support communications (phone, email, chat)
• Dispatch and booking interactions with ambulance/EMS partners through our platform

This Policy does not apply to any third-party sites/apps linked from AmbuHub, which maintain their own privacy policies.

3.1 Information You Provide Directly

• Identity information: full name, date of birth, government ID (where required for verification)
• Contact information: phone number, email address, home/pickup address
• Account credentials: username, password (stored encrypted)
• Emergency request details: nature of emergency, pickup/drop-off location, requested service level
• Health information: medical condition, symptoms, allergies, current medications, and other information relevant to dispatch and patient care, where voluntarily provided or required for service delivery
• Payment information: billing address, payment card details (processed via our payment processor — see Section 8)
• Insurance information: insurer name, policy/member ID, where applicable
• Communications: records of calls, chats, or emails with our support or dispatch team

3.2 Information Collected Automatically

• Device information: IP address, browser type, operating system, device identifiers
• Location data: GPS or network-based location, with your permission, to dispatch the nearest available ambulance and provide accurate ETAs
• Usage data: pages visited, features used, timestamps, referring URLs
• Cookies and similar technologies (see Section 9)

3.3 Information From Third Parties

• Ambulance/EMS provider partners (e.g., confirmation of dispatch, treatment summaries)
• Hospitals or receiving medical facilities, where coordination is necessary for patient handoff
• Insurance providers, for claims and billing verification
• Payment processors and identity verification vendors, including payment processors and identity verification providers.

We use the information we collect to:

• Dispatch ambulances and coordinate emergency or non-emergency medical transport
• Verify your identity and the validity of service requests
• Communicate with you about your request, booking, or account
• Process payments and billing, including insurance claims where applicable
• Improve the safety, reliability, and performance of our Services
• Comply with legal, regulatory, and law enforcement obligations
• Detect and prevent fraud, abuse, or misuse of the Services
• Send service-related notifications and, with your consent, marketing communications

We do not use health information for advertising purposes.

If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:

• Vital interests — to protect your life or physical safety in an emergency
• Performance of a contract — to provide the Services you request
• Legal obligation — to comply with healthcare, safety, and emergency-response regulations
• Consent— for optional features such as marketing communications
• Legitimate interests — to maintain and improve our platform, prevent fraud, and ensure security

We share information only as necessary to provide and improve our Services, and never sell personal or health information.

We may share information with:

• Ambulance, paramedic, and EMS service providers fulfilling your request
• Hospitals and receiving healthcare facilities, for continuity of care
• Payment processors and billing partners, to process transactions
• Insurance companies, where you have authorized claims processing
• Service providers and subprocessors who support our platform (e.g., cloud hosting, customer support tools), under contractual confidentiality obligations
• Regulators, law enforcement, or courts, where required by law or to protect health and safety
• Successors, in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections

Note:Applicability of HIPAA (“Covered Entity,” “Business Associate,” or neither) is a legal determination that defines specific obligations. Confirm your classification with counsel and complete the placeholder text below accordingly.

Where applicable, AmbuHub safeguards Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations. This includes maintaining administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of PHI.

If AmbuHub is a HIPAA Covered Entity, insert and link your full Notice of Privacy Practices here, including your patients’ rights to access, amend, and restrict use of their PHI, and how to file a complaint with the U.S. Department of Health and Human Services.

We enter into Business Associate Agreements (BAAs) with third-party vendors who handle PHI on our behalf, where required.

Payments made through AmbuHub are processed by our payment processor. We do not store full payment card numbers on our servers. Our payment processor maintains its own privacy and security practices, which you can review on their website.

We use cookies and similar technologies to operate our Site, remember preferences, and understand usage patterns. Categories of cookies we use include:

• Essential cookies — required for the Site and Services to function (e.g., session management, security)
• Performance/analytics cookies — help us understand how visitors use the Site
• Functionality cookies — remember your preferences and settings

We currently use the following analytics or advertising tools: common web analytics and advertising tools to improve the experience and measure performance.

You can control cookies through your browser settings. Disabling certain cookies may limit functionality, particularly features required for emergency dispatch.

We retain personal and health information for as long as necessary to provide the Services, comply with legal and regulatory obligations (including applicable medical record retention laws — confirm the retention period applicable to your operating jurisdictions and update this section), resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or anonymize it.

We implement industry-standard administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption of data in transit (TLS) and at rest
• Access controls limiting data access to authorized personnel on a need-to-know basis
• Regular security assessments and monitoring
• Employee training on data privacy and confidentiality

No method of transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your information, subject to legal retention requirements
• Restrict or object to certain processing of your information
• Receive a copy of your information in a portable format
• Withdraw consent, where processing is based on consent
• Opt out of marketing communications at any time

To exercise these rights, contact us at Contact@ambuhub.com. We will respond within the timeframe required by applicable law.

California residents: You may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information. AmbuHub does not sell personal information.

AmbuHub’s Services are not directed to children under the age of 18yrs. We do not knowingly collect personal information from children, except where necessary to dispatch emergency medical assistance for a minor, in which case information is handled in accordance with applicable law and used solely for that purpose.

Your information may be transferred to and processed in countries other than your country of residence. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect information transferred internationally. Confirm the list of destination countries applicable to your operations and update this section.

Our Site may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated Policy on this page with a revised “Last Updated” date, and where changes are material, we will provide additional notice (such as email or an in-app notification).

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: