Privacy Policy

Draft for legal review

This policy describes how the platform is built to handle personal and health data. It must be reviewed by qualified counsel and aligned with SETHRIDA SMARTCARE's registration with Ghana's Data Protection Commission (Data Protection Act, 2012 — Act 843) before launch.

Who we are

SETHRIDA SMARTCARE ("we") provides teleconsultation, home care, exercise therapy and health-data services in Ghana. We are the data controller for personal data processed through this platform.

What we collect

Account details: name, email, phone number and password (stored only as a one-way hash).
Health information you choose to provide: allergies, medications, conditions, history, reasons for consultation and uploaded documents.
Service records: appointments, consultation notes, prescriptions, referrals and reports.
Payment records: amount, reference and status. Card and Mobile Money details are processed by our payment provider and are never stored by us.
Datasets submitted for analysis by organisations and researchers.
Technical data: login times, IP address and device type for security and audit purposes.

How we use it

To deliver the services you book and to communicate with you about them.
To let the professionals assigned to your care see the information they need.
To process payments, issue receipts and meet accounting obligations.
To keep the platform secure, detect misuse and maintain audit records.

We do not sell personal data, and we do not use health information for advertising.

Who can see your health information

Only you, the professionals assigned to your appointments, and authorised staff who need it to coordinate your care. Clinical information is encrypted in our database and every file access is logged.

Consent

We ask for your consent when you register and before virtual consultations. You may withdraw consent at any time by contacting us; this will not affect care already provided.

Retention

We keep clinical records for the period required by applicable healthcare regulations, then delete or anonymise them. Analytics datasets are deleted after project completion according to the retention period agreed with each client.

Your rights

You can ask to access, correct or delete your personal data, or object to certain processing. Contact us at hello@sethridasmartcare.com.

Security

We use encrypted connections (HTTPS), encryption of sensitive data at rest, role-based access controls, rate limiting and audit logging. No system is perfectly secure; we will notify affected users and regulators of any breach as required by law.