Jacaranda’s Data Protection Policy (2024)
Jacaranda Health Services Limited (“Jacaranda Health”) is committed to protecting the privacy and confidentiality of all individuals using our eHealth services, particularly focusing on maternal health and newborn care. This Data Protection Policy outlines our commitment to safeguarding the personal information of both illiterate and literate mothers, including mentally and physically disabled mothers, while adhering to applicable laws and regulations, particularly the Kenyan Data Protection Act.
This policy applies to all personal information collected, processed, stored, or transmitted by Jacaranda Health in the course of providing eHealth services to mothers. It includes data collected through mobile applications, websites, telephone calls, SMS, and any other means of communication.
Data Collection and Consent
3.1. Collection of Personal Information
Jacaranda Health collects only the minimum necessary personal information from mothers in order to provide effective and personalized eHealth services. Personal information may include but is not limited to names, addresses, contact details, medical history, and health-related data.
Jacaranda Health ensures that informed consent is obtained from mothers before collecting and processing their personal information. For illiterate mothers, alternative methods of consent such as voice recordings or thumbprints may be used, along with clear explanations of the purpose and potential uses of their data.
Data Use and Processing
4.1. Purpose Limitation
Personal information collected by Jacaranda Health is used solely for the purpose of providing eHealth services and improving maternal and newborn care. Data will not be used for any other purpose without obtaining explicit consent from the mothers or as required by law.
4.2. Confidentiality and Security
Jacaranda Health implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and security of personal information. This includes measures to protect against unauthorized access, alteration, disclosure, or destruction of data.
4.3. Data Retention
Personal information will be retained only for as long as necessary to fulfill the purposes for which it was collected, and in compliance with applicable legal and regulatory requirements. Once the retention period has expired, data will be securely deleted or anonymized.
Data Sharing and Disclosure
5.1. Third-Party Access
Jacaranda Health may share personal information with trusted third parties, including healthcare providers and partners, solely for the purpose of improving maternal and newborn care. These third parties are required to adhere to the same level of data protection and confidentiality as Jacaranda Health.
5.2. Legal Compliance and Disclosure
Jacaranda Health may disclose personal information when required to do so by law or when necessary to protect the safety, rights, or property of mothers, Jacaranda Health, or the public.
Rights of Data Subjects
Jacaranda Health respects the rights of data subjects and will facilitate the exercise of these rights, including the rights to access, rectify, restrict processing, object to processing, and erasure. Procedures will be established to handle such requests in a timely and compliant manner.
Training and Awareness
Jacaranda Health provides regular training and awareness programs to its employees and partners regarding data protection practices, confidentiality, and privacy rights. This ensures that all personnel handling personal information are aware of their responsibilities and obligations.
Monitoring and Compliance
Jacaranda Health regularly monitors its data protection practices to ensure compliance with this policy and applicable laws. Any breaches or non-compliance will be promptly investigated, and appropriate measures will be taken to rectify the situation.
Any questions, concerns, or requests regarding data protection should be directed to Jacaranda Health at the following: [email protected]