Privacy Policy

1. Introduction

IthalaMed ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare management platform.

2. Regulatory Compliance

We comply with applicable data protection regulations in every region we operate, including POPIA (South Africa), NDPR (Nigeria), DPA (Kenya), GDPR (where applicable), and other local data protection laws. Your personal health information is processed lawfully and in a manner that does not infringe on your privacy.

3. Information We Collect

We may collect the following categories of personal information:

• Personal identifiers (name, ID number, contact details)
• Health information (medical history, prescriptions, lab results)
• Authentication data (login credentials, session information)
• Usage data (how you interact with our platform)

4. How We Use Your Information

Your information is used to:

• Provide and maintain our healthcare services
• Facilitate communication between patients and healthcare providers
• Process prescriptions and manage appointments
• Comply with legal and regulatory requirements
• Improve our platform and user experience

5. Data Sovereignty

IthalaMed enforces strict data sovereignty policies. Your health data is stored within the country where it was collected and is subject to the local data protection laws of that jurisdiction. Data is never transferred across borders without explicit authorization and in compliance with applicable regulations.

6. Data Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 for data in transit, and comprehensive audit logging. Access to personal health information is strictly controlled and monitored.

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to the processing of your information
• Lodge a complaint with the relevant authority

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Information Officer at privacy@ithalamed.com.