Last Updated: 05/05/2025
1. Introduction
Clinic Plus (“we,” “our,” or “us”) is committed to protecting the privacy and security of your personal and health-related data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our clinic and hospital management software (“Clinic Plus”).
By accessing or using Clinic Plus, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our software.
2. Information We Collect
We collect the following types of information:
A. Personal Information
- Patient Data: Name, age, gender, contact details, medical history, diagnoses, treatments, and insurance information.
- Healthcare Provider Data: Doctor and staff names, credentials, contact details, and login credentials.
- Administrative Data: Billing details, appointment schedules, and transaction records.
B. Technical & Usage Data
- Device Information: IP address, browser type, operating system, and device identifiers.
- Log Data: Timestamps, access times, and user activity within the software.
C. Payment Information
- Mobile money transactions, bank details (if applicable), and billing records (processed securely via third-party payment gateways).
3. How We Use Your Information
We use collected data for:
- Providing Services: Managing patient records, appointments, prescriptions, and billing.
- Improving Software: Analyzing usage trends to enhance functionality.
- Communication: Sending appointment reminders, invoices, and support messages.
- Security & Compliance: Preventing fraud, ensuring data integrity, and complying with legal obligations.
4. Data Sharing & Disclosure
We do not sell your data. However, we may share information with:
- Healthcare Providers: Doctors, nurses, and clinic staff for treatment purposes.
- Third-Party Service Providers: Payment processors, cloud storage, and IT security partners (under strict confidentiality agreements).
- Legal Authorities: Only if required by law (e.g., court orders, public health regulations).
5. Data Security
We implement:
- Encryption: All data is encrypted in transit and at rest.
- Access Controls: Role-based permissions to restrict unauthorized access.
- Regular Audits: Security assessments to prevent breaches.
6. Data Retention
We retain data:
- As long as necessary for medical, legal, or operational purposes.
- Patient records are stored per Uganda’s healthcare retention laws.
7. Your Rights
You may:
- Access, correct, or delete your personal data (where legally permitted).
- Opt out of non-essential communications (e.g., marketing emails).
- Request data portability in a machine-readable format.
To exercise these rights, contact us at info@clinicplusug.com.
8. Changes to This Policy
We may update this policy periodically. Changes will be posted on our website with a revised “Last Updated” date.
9. Contact Us
For privacy-related questions, contact:
Email: info@clinicplusug.com
Phone: +256 706 397 621
Address: Kyanja, Kampala, Uganda
