Privacy Policy

Introduction

MediLink ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

By using MediLink, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

We collect information that you provide directly to us, including:

• Name, date of birth, and contact information
• National identification number for identity verification
• Email address and phone number
• Emergency contact information

Health Information

Through our platform, healthcare providers may record and share your health information, including:

• Medical history and diagnoses
• Laboratory and diagnostic test results
• Prescriptions and medications
• Treatment plans and clinical notes
• Immunization records
• Allergies and adverse reactions

Usage Information

We automatically collect certain information when you use our platform:

• Device information (type, operating system, unique identifiers)
• Log data (access times, pages viewed, app features used)
• Location data (with your consent)

How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Enable healthcare providers to access your medical records with your consent
• Verify your identity and prevent fraud
• Send you important notifications about your health records
• Improve and personalize our services
• Comply with legal obligations
• Generate anonymized, aggregated insights for healthcare research (with consent)

Information Sharing and Disclosure

With Healthcare Providers

We share your health information with healthcare providers only when you have granted them access through our consent management system. You can view and revoke access at any time through the MediLink app.

With Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as cloud hosting and data storage. These providers are contractually obligated to protect your information.

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests by public authorities.

Data Security

We implement robust security measures to protect your personal and health information:

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication for account access
• Role-based access controls for healthcare providers
• Regular security audits and penetration testing
• Secure, encrypted backups
• Comprehensive audit trails for all data access

Your Rights and Choices

You have the right to:

• Access your personal and health information stored in MediLink
• Request correction of inaccurate information
• Control which healthcare providers can access your records
• View audit logs of who has accessed your information
• Download a copy of your health records
• Request deletion of your account and associated data

Data Retention

We retain your health information for as long as your account is active or as needed to provide services. We may retain certain information as required by healthcare regulations and legal obligations. When you delete your account, we will delete or anonymize your information within 90 days, except where retention is required by law.

Children's Privacy

MediLink allows parents and guardians to manage health records for their children. We require parental consent before collecting personal information from children under 18. Parents can access, modify, or delete their child's information at any time.

International Data Transfers

Your information may be transferred to and processed in countries other than Ghana. We ensure that any such transfers comply with applicable data protection laws and that your information remains protected.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@medilinkgh.com
• Address: Accra, Ghana