Privacy Policy — Ninja Informatics Solutions
Last updated: 5 October 2026
Ninja Informatics Solutions (“NIS”, “we”, “us”) builds and
operates software for healthcare and business customers in the Maldives. This policy covers
all of our services, including:
- CD4 LIMS — our laboratory information management system, used by hospitals,
atoll hospital laboratories, and private laboratories.
- Receipt delivery for Ewity businesses — a service that sends digital
receipts and related messages over WhatsApp for businesses (“Participating
Businesses”) using the Ewity point-of-sale platform.
- This and other NIS websites and our support channels.
Our role
- For LIMS deployments, the laboratory or healthcare provider is the data
controller. NIS acts as a data processor: we process patient and laboratory
data only to provide the software and support the laboratory has engaged us for, and on that
organisation’s instructions.
- For the receipt-delivery service, NIS processes data on behalf of the
Participating Business to deliver its receipts and messages.
What we handle
- LIMS: laboratory staff accounts (name, email, role), and, on behalf of the
laboratory, patient and specimen data such as patient identifiers, test orders, and test
results. The laboratory is responsible for obtaining any consent required for that data.
- Receipt delivery: mobile number (provided at checkout or held by the
Participating Business), transaction details (receipt/bill number, items, amounts, currency,
business name), and message content exchanged with the service. We do not collect payment
card details.
- Websites and support: contact details and the content of enquiries you
send us.
Why we use it
- To provide, operate, secure, and support the software our customers use.
- To deliver receipts and respond to messages about them.
- To meet the participating organisation’s record-keeping and legal requirements.
- To respond to enquiries and improve our services.
We do not sell personal data, and we do not use it for advertising.
How it is shared
- Receipts and messages are delivered through Meta’s WhatsApp Business
Platform; Meta processes message content and delivery metadata as an independent
provider under its own terms.
- Within the organisation that engaged us — for example, the laboratory sees the data in its
LIMS, and the Participating Business sees its own receipts and conversations.
- With service providers who host or operate our infrastructure, under confidentiality
obligations.
- Where required by law.
Retention
LIMS data is retained according to the laboratory’s instructions and its record-keeping
obligations. Receipt records are kept only as long as needed for the service, the Participating
Business’s accounting requirements, and legal obligations. Message content is deleted when
no longer needed for support or records.
Security
We use access controls, encryption in transit, and documented operating procedures to protect
the data we process, and limit access to staff who need it. No system is perfectly secure, but
we work to keep pace with the sensitivity of the data our customers entrust to us.
Your choices and rights
You can reply STOP to opt out of non-essential messages, or contact the
Participating Business directly. For data held in a laboratory’s LIMS, please contact that
laboratory first — it is the controller of that data. To ask about, correct, or delete data held
by us, contact the address below.
Changes
We may update this policy from time to time. The “last updated” date above
reflects the current version.
Contact
Ninja Informatics Solutions — support@nis.mv