Privacy Policy

Primecare Heart Clinic ("Primecare", "we", "us") is committed to protecting your privacy. This policy explains what personal and health information we collect, why we collect it, how we keep it safe, and the rights you have. We handle your data in line with the Kenya Data Protection Act 2019 and the guidance of the Office of the Data Protection Commissioner (ODPC).

Who we are

Primecare Heart Clinic is a cardiology and internal medicine practice with locations at The Nairobi Hospital (Anderson Centre) and Galleria Business Park, Karen. For any privacy question, contact our Data Protection Officer using the details at the end of this policy.

What we collect

• Identity and contact details - name, date of birth, gender, phone number, email, and postal or physical address.
• Health information - your medical history, symptoms, diagnoses, test and imaging results, prescriptions, and clinical notes.
• Next-of-kin and emergency contacts - so we can reach someone on your behalf when needed.
• Insurance and billing details - your insurer, membership number, and payment records.
• Appointment and visit records - bookings, arrival times, and the stations you moved through during a visit.

Why we use it

• To provide your medical care and keep accurate clinical records.
• To book, confirm and remind you about appointments.
• To process payments and handle insurance claims and pre-authorisations.
• To meet our legal and professional record-keeping obligations under the Health Act 2017, the Digital Health Act 2023, and Kenya Medical Practitioners and Dentists Council (KMPDC) requirements.

How we keep it safe

Your records are stored on secure, access-controlled systems hosted in Kenya. Access is limited to the staff who need it for your care, every access to sensitive records is logged, and connections are encrypted. We do not sell your data, and we do not share it except as described below.

When we share it

We only share your information where it is necessary and lawful: with other clinicians involved in your care, with your insurer to process a claim you have authorised, with laboratories or imaging partners carrying out tests we order, and where the law requires us to. Any technology provider that processes data on our behalf does so under a written agreement that binds them to protect it.

How long we keep it

We retain patient records for the period required by KMPDC and Kenyan medical-records guidance, and other personal data only for as long as the purpose we collected it for requires. After that, it is securely disposed of.

Your rights

Under the Data Protection Act 2019 you have the right to access the personal data we hold about you, to ask us to correct anything that is wrong, to request erasure where the law allows, and to object to certain uses. To exercise any of these, contact our Data Protection Officer and we will respond within the timelines the law sets.

Contact us

Data Protection Officer, Primecare Heart Clinic
Email: info@primecareheart.co.ke
Phone: 0710 828 016

If you are not satisfied with how we have handled your data, you may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.