PatientCare Privacy Policy

At PatientCare, operated by DAWA AFYA MEDICAL TECHNOLOGIES CC, your privacy and the protection of your health information are our highest priorities. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website, mobile applications ("PatientCare" and "PatientCare Doctor"), and related services (collectively, the "Services").

1.Who we are

PatientCare is a digital healthcare platform connecting patients and healthcare professionals through secure, compliant technology. The Service is owned and operated by DAWA AFYA MEDICAL TECHNOLOGIES CC, a Namibian-registered company headquartered in Windhoek.

2.Scope of this Policy

This Policy applies to all personal and health-related information collected through our apps, website, and communications. It applies to both patients and healthcare professionals.

3.Information we collect

a) Information you provide

• Account details (name, email, phone number, date of birth, password).
• Profile and medical history (gender, allergies, chronic conditions, lifestyle data).
• Uploaded documents (identity documents, prescriptions, lab results, certificates).
• Consultation and communication data (messages, audio/video logs where applicable).
• Payment and transaction metadata (via secure third-party processors; no card storage).

b) Information collected automatically

• Device data, app version, language, system logs, and crash reports.
• IP address and approximate location for security and localisation.
• Cookies, web storage, and analytics data on the website (for performance and usage).

Website analytics cookies load only after you accept them in our cookie banner. Until then, no analytics cookies are stored. You can change or withdraw your choice at any time using the Cookie settings link in the footer.

c) Information from healthcare professionals

• Consultation notes, prescriptions, referrals, and related clinical documentation.
• Professional credentials, certificates, and verification details (for doctors).

4.How we use your information

• To create and manage your PatientCare account.
• To facilitate consultations and securely store medical records.
• To enable doctors to issue prescriptions, referrals, and sick notes.
• To process secure payments for services.
• To provide customer support and troubleshoot technical issues.
• To improve the platform and develop new healthcare-related features.
• To comply with legal, tax, and regulatory obligations.

5.Legal basis for processing

• Consent: for collecting and processing health data.
• Contractual necessity: to deliver healthcare services.
• Legal obligation: for compliance with healthcare laws.
• Legitimate interest: to improve safety and prevent fraud.

6.How we share your information

• Healthcare professionals: doctors you consult through PatientCare.
• Service providers: AWS (hosting), payment gateways (Buddy, Finatic, Flutterwave), analytics, and SMS/email communication services.
• Legal authorities: only when required by law or to protect vital interests.
• We never sell or rent your data to advertisers or third parties.

7.AI and automated processing

PatientCare may use AI-powered tools (for example, symptom checkers, fraud detection, or data extraction from uploaded documents) to enhance efficiency. These systems operate under strict human supervision and comply with ethical and legal data protection requirements. AI processing does not replace medical judgment, and final decisions are always made by qualified healthcare professionals.

8.Data retention

We retain personal and medical data for as long as necessary to provide the Services and comply with applicable laws. Medical records may be retained for up to seven (7) years in accordance with Namibian medical recordkeeping standards. When no longer required, data is securely deleted or anonymised.

9.Data security

• Encryption in transit (TLS 1.2+) and at rest (AES-256) for sensitive data.
• Secure hosting via AWS with restricted access and audit logging.
• Regular backups, threat monitoring, and access controls.
• Employee and contractor confidentiality agreements.

10.International data transfers

PatientCare may process and store information in secure data centres located in the European Union or South Africa. Where cross-border transfers occur, we use data processing agreements and standard contractual clauses to ensure an adequate level of protection.

11.Your data protection rights

• Access and receive a copy of your data.
• Request correction or deletion of inaccurate data.
• Withdraw consent to processing where applicable.
• Object to or restrict certain processing activities.
• Request data portability in structured electronic format.
• Complain to a data protection authority if you believe your rights are violated.

12.Children's privacy

PatientCare is not directed at children under 16 years old. Accounts for minors must be created and managed by parents or legal guardians. If we learn that we have collected data from a child without consent, we will promptly delete it.

13.Updates to this Policy

We may update this Privacy Policy periodically. Material changes will be communicated through the app or via email. Continued use of the Services after such changes constitutes acceptance of the revised Policy.

14.Contact us

For privacy inquiries, access requests, or complaints, please contact:

• Email: admin@patientcare.care
• DAWA AFYA MEDICAL TECHNOLOGIES CC, Windhoek, Namibia