Privacy Policy

1. Scope & Applicable Law

This Privacy Policy explains how Medveel Medical Centre ("we", "us", or "our"), a fully accredited health facility located in Githurai, Kiambu County, processes information collected through our website (https://medveel.co.ke) and during outpatient consultations. We comply strictly with the Kenya Data Protection Act, 2019 and Ministry of Health patient confidentiality codes.

2. Information We Collect

We may collect information when you book an appointment, make an online enquiry, or visit our facility in Githurai:

• Personal Identifiers: Full name, phone number, email address, national identity or birth certificate details.
• Clinical / Appointment Inquiries: Selected clinical service, preferred appointment date and time window, and non-sensitive descriptive notes you submit.
• Digital Log Data: Standard server logs, browser type, and anonymous access timestamps to ensure site security.

3. Purpose of Data Processing

Your information is processed strictly for legitimate clinical and operational purposes:

• Scheduling, managing, and confirming your clinical appointments.
• Providing immediate emergency triage and healthcare communication.
• Maintaining accurate clinical records required by Kenya Ministry of Health regulations.
• Responding to patient inquiries submitted via phone, WhatsApp, or contact forms.

4. Confidentiality & Third Parties

We do not sell, rent, or trade your personal or health data to advertisers or third parties. Information may only be shared with:

• Qualified medical professionals directly involved in your clinical diagnosis and treatment.
• Authorized statutory healthcare bodies (e.g., Ministry of Health disease surveillance) when mandated by Kenyan law.
• Referral hospitals if specialized tertiary escalation is required with your informed consent.

5. Data Security & Storage

We maintain technical, organizational, and physical safeguards to prevent unauthorized access, loss, alteration, or disclosure of patient data.

6. Your Rights under the Kenya Data Protection Act

As a data subject in Kenya, you have the right to:

• Be informed how your data is being used.
• Access your personal data in our custody.
• Request correction of false, misleading, or outdated personal information.
• Request deletion of data where its retention is no longer required by medical record retention laws.