Privacy & Data Protection

Your privacy matters in the Staffroom

HealthWorkersBlog is built around trust, confidentiality and professional safety. This page explains how we collect, use, protect and manage personal information when you visit, submit, comment or interact with the platform.

01 No patient details

We do not want patient-identifiable or confidential workplace information.

02 Controlled submissions

Stories and comments may be reviewed to protect safety and professionalism.

03 Privacy-first community

Emails are used for admin review and communication, not public display.

HealthWorkersBlog core principle: We do not give patient advice. We decode healthcare work. Your privacy, confidentiality and professional safety matter to us.

Privacy Policy

Last updated: 25/05/2026

HealthWorkersBlog respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, protect and manage personal information when you visit HealthWorkersBlog, submit a story, comment on posts, contact us, use our website features, interact with our content, or participate in community-led activities.

HealthWorkersBlog is a digital staffroom for healthcare workers. We provide general information, reflections, career learning, workplace discussion, professional awareness and community-led content for healthcare workers.

We do not provide patient advice. We decode healthcare work.

1. Who we are

This website is operated by HealthWorkersBlog.

Website: healthworkersblog.com
Contact email: [insert email address]Country of registration/operation: Nigeria
Hosting location: Nigeria, unless changed by our hosting provider or service arrangements

HealthWorkersBlog may also be managed, accessed or supported from the United Kingdom or other countries from time to time.

For the purpose of applicable data protection laws, including the Nigeria Data Protection Act 2023, HealthWorkersBlog is responsible for deciding how personal information collected through this website is used and protected.

Where users access the website from the United Kingdom, European Union or other regions, we aim to handle personal information in line with relevant privacy and data protection principles that may apply, including transparency, fairness, security, accountability and respect for user rights.

2. Scope of this policy

This Privacy Policy applies to personal information collected through:

HealthWorkersBlog website pages, blog posts, forms, comments, user-submitted posts, story submissions, contact forms, newsletter sign-ups, cookie tools, analytics tools, security tools, anti-spam tools and any community features we may introduce.

This policy does not apply to external websites that we may link to. External websites are responsible for their own privacy practices.

3. What personal information we collect

We may collect and process the following types of personal information.

4. Information you provide directly

You may provide information when you submit a story, comment, contact us, sign up for updates, or use website features.

This may include:

Your name, display name or chosen contributor name.

Your email address.

Your website URL, if you choose to provide it.

Your healthcare role, professional background, country, location or experience, if you choose to provide it.

Your story submission, reflection, question, comment or article.

Your anonymous publication preference.

Your contact form message.

Your newsletter or mailing list preference, if this feature is enabled.

Any other information you voluntarily include in a submission, comment or message.

You should not submit patient-identifiable information, confidential workplace information, names of colleagues, names of managers, names of patients, private screenshots, private documents, or information that could identify a real individual, organisation or incident.

5. Information collected automatically

When you visit the website, some technical information may be collected automatically.

This may include:

IP address.

Browser type and version.

Device type.

Operating system.

Pages visited.

Time and date of visit.

Referring website.

Approximate location derived from technical data.

Cookie preferences.

Security logs.

Spam detection information.

Form submission metadata.

This information may be collected through WordPress, hosting services, security tools, analytics tools, spam protection tools, cookies or similar technologies.

6. Sensitive information

HealthWorkersBlog is not designed to collect sensitive personal information.

You must not submit:

Patient-identifiable information.

Health information about patients or third parties.

Confidential workplace information.

Private employment documents.

Names of patients, colleagues, managers, employers or private individuals where this could cause identification or harm.

Information about children or vulnerable people.

Private screenshots, emails, chat messages or documents.

If such information is submitted, we may delete, edit, anonymise, reject or remove it without notice.

7. How we use personal information

We may use personal information for the following purposes.

8. To operate and maintain the website

We use technical and operational information to keep the website functioning, secure, accessible and updated.

9. To review and manage submissions

If you submit a story, reflection, article, question or comment, we may use the information you provide to review, moderate, edit, approve, reject or publish the content.

10. To contact you about your submission

We may use your email address to ask for clarification, confirm receipt, discuss edits, notify you about publication, or respond to your enquiry.

11. To manage comments and community interaction

If you comment on posts, we may collect and use your name, email address, IP address, browser information and comment content to help moderate discussion, prevent spam and protect the platform.

12. To protect safety, confidentiality and professional standards

We may review submissions and comments to remove or prevent patient-identifiable information, confidential workplace information, names of individuals, defamatory content, unsafe content, abusive content, spam, misleading content, or material that does not meet our community standards.

13. To improve the website

We may use analytics, performance information and feedback to understand how visitors use the website, which pages are useful, and how the platform can be improved.

14. To send updates if you subscribe

If we offer a newsletter or email update service and you choose to subscribe, we may use your email address to send updates. You can unsubscribe at any time.

15. To comply with legal obligations

We may process information where necessary to comply with applicable laws, respond to lawful requests, protect rights, prevent abuse, or maintain records.

16. Lawful basis for processing personal information

We process personal information only where we have a lawful reason to do so.

Depending on the situation, we may rely on one or more of the following bases.

17. Consent

We may rely on consent where you voluntarily submit information, accept non-essential cookies, subscribe to updates, or choose to participate in certain website features.

Where consent is used, you may withdraw it where applicable.

18. Legitimate interests

We may rely on legitimate interests to operate the website, review submissions, moderate comments, prevent spam, protect the community, improve content, maintain security, respond to enquiries and manage our platform.

19. Performance of a requested service

We may process information to respond to a request you make, such as reviewing a submission, responding to a contact form, processing a contribution, or providing access to a website feature.

20. Legal obligation

We may process information where required to comply with applicable law, lawful requests, record-keeping duties, regulatory requirements or legal processes.

The Nigeria Data Protection Commission describes privacy principles under the Nigeria Data Protection Act 2023 as covering how personal data is collected, used, stored, disclosed, restricted, erased or otherwise managed. (Nigeria Data Protection Commission)

21. Anonymous submissions

HealthWorkersBlog may allow contributors to publish stories or reflections anonymously.

If you choose to publish anonymously, your public contributor name may appear as:

Anonymous Staffroom Voice

However, we may still collect your email address privately for moderation, verification, abuse prevention, editorial review and follow-up. Your email address will not be displayed publicly.

Anonymous publication does not allow users to submit harmful, defamatory, confidential, misleading, discriminatory, abusive or professionally unsafe content.

22. User-submitted content

If you submit a story, reflection, article, question or comment, you are responsible for ensuring that your submission does not include prohibited or unsafe information.

You must not submit:

Patient-identifiable information.

Confidential workplace information.

Names of patients, colleagues, managers or private individuals.

Private screenshots, emails, chat messages or documents.

Defamatory allegations.

Discriminatory, hateful, abusive or threatening content.

Copyrighted material you do not have permission to use.

Misleading or unsafe professional claims.

Information that could breach professional standards or workplace confidentiality.

We may edit, reject, remove, anonymise or refuse submissions at our discretion to protect individuals, confidentiality, professionalism and the purpose of the website.

Once content is published, it may be visible to the public and may be indexed by search engines.

23. Comments

When visitors leave comments, the website may collect the information shown in the comment form, the visitor’s IP address and browser user agent string to help detect spam.

Comments may be manually moderated before appearing on the website.

We reserve the right to edit, reject, delete or refuse comments that are abusive, discriminatory, defamatory, spammy, unsafe, confidential, misleading, irrelevant or outside the purpose of the platform.

24. Contact forms

If you contact us through a form, we may collect your name, email address and message.

We use this information to respond to your enquiry, manage requests, maintain records and improve communication.

Do not send confidential patient information, private workplace information, urgent matters, or sensitive documents through the website contact form.

25. Newsletter and email updates

If you subscribe to a newsletter or email update service, we will use your email address to send the updates you requested.

You can unsubscribe at any time using the unsubscribe link in the email, where available, or by contacting us.

We do not sell your email address.

26. Cookies and similar technologies

HealthWorkersBlog may use cookies and similar technologies to operate the website, remember preferences, improve performance, protect against spam, measure website use and support embedded or third-party services.

Cookies are small files placed on your device when you visit a website.

The ICO states that websites should tell visitors that cookies are being used, explain what they do, and obtain agreement for cookies that are not strictly necessary. (ICO)

27. Types of cookies we may use

28. Strictly necessary cookies

These cookies help the website function properly.

They may support login, form submission, cookie preferences, security, spam prevention and basic website operation.

These cookies may be used without separate consent where permitted by applicable law.

29. Performance and analytics cookies

These cookies help us understand how visitors use the website, such as which pages are visited, how long users stay, and how people move around the site.

Where required, we will request consent before using analytics cookies.

30. Functionality cookies

These cookies may remember user preferences or support enhanced website features.

31. Security and spam protection cookies

These cookies may be used by tools such as reCAPTCHA, anti-spam systems, login protection tools or security plugins to protect the website from automated abuse, spam, hacking attempts and misuse.

32. Third-party cookies

Some services connected to or embedded on the website may set their own cookies.

This may include analytics providers, video platforms, social media embeds, advertising tools, newsletter services, security tools, reCAPTCHA services or embedded content providers.

These third parties are responsible for their own cookie and privacy practices.

33. Cookie consent

Where required, we will ask for consent before using non-essential cookies such as analytics, advertising, marketing or certain third-party tracking cookies.

Cookie consent should be clear, specific, informed and based on a positive user action where required. The ICO also states that consent cannot be validly shown only by hiding cookie information inside a hard-to-find privacy policy. (ICO)

You may manage cookie preferences through our cookie banner or cookie settings, where available.

You may also control cookies through your browser settings.

Blocking or deleting cookies may affect how the website works.

34. Google reCAPTCHA and spam protection

We may use Google reCAPTCHA or similar tools to protect forms, comments and submissions from spam and abuse.

These tools may collect technical information such as IP address, browser information, device information, cookies and user interaction data to determine whether a submission is likely to be human or automated.

Use of Google reCAPTCHA may be subject to Google’s own Privacy Policy and Terms of Service.

35. Analytics

We may use analytics tools to understand how people use HealthWorkersBlog.

Analytics may collect information such as pages visited, device type, browser type, approximate location, referral source and time spent on the website.

Where required, analytics cookies will only be used with user consent.

36. Embedded content from other websites

Posts or pages on HealthWorkersBlog may include embedded content such as videos, images, articles, social media posts or other media.

Embedded content from other websites behaves in the same way as if you visited the external website directly.

These external websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with the embedded content.

We are not responsible for the privacy practices of external websites.

37. Who we share personal information with

We do not sell personal information.

We may share limited personal information with trusted service providers where necessary to operate, secure and manage the website.

This may include:

Web hosting providers.

Domain and server providers.

WordPress plugins and website tools.

Security and spam protection services.

Email delivery or newsletter providers.

Analytics providers.

Backup providers.

Cloud storage providers.

Professional advisers.

Regulators, authorities, courts or law enforcement where legally required.

We only share information where necessary and appropriate.

38. Hosting and international access

HealthWorkersBlog is hosted in Nigeria, unless our hosting or technical arrangements change.

However, the website may be accessed, managed or supported from the United Kingdom or other countries. Some tools, plugins, service providers or third-party platforms connected to the website may process information outside Nigeria.

Where personal information is transferred or accessed internationally, we aim to use reasonable safeguards and responsible service providers that support appropriate data protection standards.

39. How long we keep information

We keep personal information only for as long as necessary for the purpose it was collected.

Examples include:

Contact form messages may be kept for as long as needed to respond and maintain appropriate records.

Story submissions may be kept for editorial, moderation, publication and record purposes.

Published content may remain on the website unless removed.

Comments may remain on the website unless removed.

Newsletter subscription data may be kept until you unsubscribe or request deletion.

Technical logs may be kept for security, maintenance, fraud prevention and troubleshooting for a limited period.

We may keep certain information longer where necessary for legal, safety, moderation, dispute, abuse prevention or record-keeping reasons.

40. Security

We take reasonable steps to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.

These steps may include secure hosting, login protection, backups, moderation, access controls, spam protection, reCAPTCHA, website security tools and limiting administrative access.

However, no website, hosting environment, plugin, email system or online service can be guaranteed to be completely secure.

Users submit information at their own discretion and should avoid sending sensitive, confidential or unnecessary personal information.

41. Your privacy rights

Depending on the law that applies to you, you may have rights over your personal information.

These may include:

The right to be informed about how your information is used.

The right to request access to your personal information.

The right to request correction of inaccurate information.

The right to request deletion of your information.

The right to request restriction of processing.

The right to object to certain processing.

The right to withdraw consent where processing is based on consent.

The right to complain to a relevant data protection authority.

To exercise your rights, contact us at:

[insert email address]

We may need to verify your identity before responding.

42. Requests to remove published submissions

If you submitted a story, reflection or comment and want it removed or anonymised, contact us at:

[insert email address]

We will consider reasonable requests, especially where privacy, safety, confidentiality or professional concerns are involved.

However, we may need to retain certain records where necessary for legal, moderation, abuse prevention or legitimate administrative reasons.

43. Complaints

If you are concerned about how we handle your personal information, please contact us first so we can try to resolve the issue.

If you are in Nigeria, you may contact the Nigeria Data Protection Commission, which is responsible for safeguarding data privacy and enforcing responsible data handling in Nigeria. (Nigeria Data Protection Commission)

If you are in the United Kingdom, you may contact the Information Commissioner’s Office.

If you are in another country, you may have the right to contact your local data protection authority.

44. Children

HealthWorkersBlog is intended for healthcare workers, students, professionals and adults interested in healthcare worker learning and professional discussion.

The website is not directed at children.

Users must not submit personal information about children, young people, patients or vulnerable individuals.

45. External links

HealthWorkersBlog may link to external websites, resources, tools or third-party platforms.

These links are provided for convenience and information only.

We are not responsible for the content, accuracy, privacy practices, policies or security of external websites.

You should read the privacy policies of any external websites you visit.

46. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will be published on this page with an updated date.

Where changes are significant, we may take reasonable steps to bring them to users’ attention.

47. Contact us

For privacy questions, data requests, removal requests or concerns, contact:

Email: [insert email address]Website: healthworkersblog.com
Platform: HealthWorkersBlog

48. Our core privacy principle

HealthWorkersBlog does not give patient advice.

We decode healthcare work.

Your privacy, confidentiality and professional safety matter to us.