Effective Date: 10/30/2025

1. Introduction

At St. Bakhita Hospital Utawala, we are committed to safeguarding your privacy and protecting the security of your personal data.
This Privacy Policy explains how we collect, use, process, and protect your personal information in line with the Data Protection Act, 2019 (Kenya) and other relevant healthcare regulations.

By accessing our services, website, or patient applications, you consent to the practices described in this policy.

2. Information We Collect

We may collect both personal and non-personal information when you interact with us, including:

• Your name, contact details (phone number, email, address), and identification documents

• Medical information relevant to your treatment and healthcare needs

• Payment or insurance details for billing purposes

• Non-personal data such as your IP address, device type, and browser information (collected through cookies and analytics tools, with your consent)

In providing healthcare services, we may also collect sensitive health data as required by law and the Ministry of Health, Kenya.

3. How We Use Your Information

Your information helps us deliver safe, efficient, and personalized healthcare. We may use your data to:

• Provide medical consultation, diagnosis, treatment, and follow-up care

• Respond to inquiries, feedback, or appointment requests

• Manage billing, payments, and insurance claims

• Improve hospital operations, service quality, and patient experience

• Send notifications or reminders for appointments, lab results, or health programs

• Comply with legal and regulatory requirements

• Prevent, investigate, and manage fraud, data misuse, or security issues

4. Patient App and Digital Services

We are proud to partner with ITDose Infosystem, an IT solutions provider, to offer the St. Bakhita Patient App.
Through the app, users can:

• Book doctor appointments and lab tests remotely

• Receive health notifications and reminders

• Track personal health indicators

• View medical reports and bills conveniently

Your data shared through the app is processed securely and solely for healthcare-related purposes.

5. Sharing Your Information

We do not sell or trade your personal information. However, we may share it responsibly in the following cases:

• With authorized healthcare professionals and departments involved in your care

• With insurance providers or other verified third parties to validate and process claims

• With service providers or partners (such as ITDose Infosystem) who help us operate our systems under strict confidentiality agreements

• With government or legal authorities when required by law or court order

6. Retaining Your Information

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law or medical regulations.
Once data is no longer needed, it is securely deleted or anonymized.

7. Protecting Your Information

We employ appropriate technical, administrative, and organizational measures to safeguard your personal data from unauthorized access, alteration, or disclosure.
While we take every precaution, please note that no system can guarantee absolute security.

8. Your Rights

Under the Data Protection Act (2019), you have the right to:

• Access and request a copy of your personal data

• Request correction or deletion of inaccurate information

• Object to or restrict certain forms of data processing

• Withdraw consent where applicable

• File a complaint with our Data Protection Officer or the Office of the Data Protection Commissioner (ODPC)

To exercise these rights, please contact us using the details below.

9. Updates to this Policy

We may update this Privacy Policy periodically to reflect new legal requirements, technology, or service changes.
Updated versions will be posted on our website with the revised effective date.

10. Contact Us

If you have any questions, comments, or concerns about how we handle your data, please reach out to us