Privacy Policy

At Healnet Africa, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Data Protection Act No. 11 of 2021 of the Republic of Zambia.

1. Information We Collect

Personal Information

We may collect the following personal information from you:

Name, address, phone number, and email address
Date of birth and gender
Medical history, health conditions, and treatment records
Appointment details and medical provider preferences
Payment and billing information (processed securely)

2. How We Use Your Information

We use your personal data for the following purposes:

To facilitate appointment bookings and manage your healthcare services
To communicate with you regarding appointments, reminders, or changes to our services
To process payments and manage billing
To improve user experience and enhance our platform functionality
To comply with legal obligations under the Data Protection Act No. 11 of 2021

3. Lawful Basis for Processing

Under the Data Protection Act No. 11 of 2021, we process your personal information only when:

You have given your explicit consent;
It is necessary for the performance of a contract (e.g., booking a doctor’s appointment);
It is required to comply with a legal obligation;
It is necessary for the purposes of legitimate interests pursued by us or a third party, except where such interests are overridden by your rights;
It is necessary for reasons of public interest in the area of public health.

4. Information Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These include:

Encryption of sensitive data both at rest and in transit
Secure server infrastructure hosted within or compliant with Zambian data localization requirements
Regular system audits and vulnerability assessments
Restricted access controls and multi-factor authentication

5. Data Sharing

We may share your personal information with:

Healthcare providers involved in your care;
Third-party payment processors for billing purposes;
Government authorities or regulatory bodies when required by law;
Service providers who assist us in operating our platform, subject to confidentiality agreements.

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Medical records may be retained in accordance with applicable health regulations in Zambia.

7. Your Rights Under Zambian Law

As a data subject under the Data Protection Act No. 11 of 2021, you have the right to:

Access your personal information;
Correct any inaccurate or incomplete information;
Delete your personal information under certain circumstances;
Object to or restrict processing of your data;
Withdraw consent at any time where processing is based on consent;
Lodge a complaint with the Information and Communications Technology Authority (ITA) if you believe your rights have been violated.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze site usage. You can control cookie settings through your browser preferences.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised effective date.

10. Contact Us

If you have questions about this Privacy Policy, or wish to exercise your data protection rights, please contact us at:

Email: privacy@healnetafrica.com

Postal Address: [Insert Company Address, Lusaka, Zambia]

11. Supervisory Authority

In case of concerns or complaints regarding our handling of your personal data, you may contact the Information and Communications Technology Authority (ITA), the data protection regulator in Zambia.

Website: www.ita.org.zm