Effective Date: 22 Nov 2024

At Storkfort Health (www.sh.co.bw), we prioritize the privacy and protection of your personal data. This Data Privacy Policy describes how we collect, use, store, share, and protect your personal information in accordance with the Data Protection Act, 2018 (Botswana), General Data Protection Regulation (GDPR) (EU), and Health Insurance Portability and Accountability Act (HIPAA) (USA). This policy applies to all interactions with Storkfort Health, including when you visit our website (www.sh.co.bw) or use our services.

1. Information We Collect

We collect and process personal data to provide our occupational health services. This data may include:

• Personal Identification Information: Your name, email address, phone number, postal address, and other contact details.
• Health Information: Medical history, current health status, treatment records, prescriptions, test results, and other health-related information necessary for providing occupational health services.
• Technical Information: Data collected from your interactions with our website (e.g., IP address, browser type, device information, and cookies) to enhance user experience and gather analytical data.
•  

2. How We Use Your Information

We process your personal data for the following purposes:

• Providing Health Services: We use your information to deliver health services such as medical evaluations, treatment, and management of health-related activities.
• Appointment Management: To schedule, confirm, and manage appointments, as well as follow-up communications.
• Legal Compliance: To comply with local and international laws and regulations, such as maintaining medical records under HIPAA (USA) and Data Protection Act, 2018 (Botswana).
• Administrative and Operational Purposes: To improve our services, carry out internal processes, and maintain records for the effective operation of the business.
• Marketing and Communication: We may use your contact details to send you health-related updates, newsletters, and promotional materials (you may opt out at any time).

 

3. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

• Consent: We may process your data if you have given explicit consent for a specific purpose (e.g., receiving health updates or participating in health programs).
• Contractual Necessity: Processing is necessary to fulfill the terms of our agreement with you, such as providing medical or occupational health services.
• Legal Obligation: We are required by law to process and retain certain health information to comply with healthcare laws and regulations.
• Legitimate Interests: We may process your data based on our legitimate interests, such as ensuring the security and integrity of our systems, improving our services, and ensuring the efficiency of operations.

 

4. Data Sharing and Third-Party Disclosures

We do not sell or rent your personal data. However, we may share your data in the following situations:

• Healthcare Providers: Your information may be shared with medical professionals and institutions involved in your care (e.g., physicians, clinics, hospitals).
• Service Providers: We may share your data with third-party vendors and service providers that assist with IT services, administrative tasks, data storage, or analytics, all of which are subject to confidentiality agreements.
• Legal Requirements: If required by law, regulatory authorities, or in response to a legal process (e.g., court orders, government requests), we may disclose your personal data.

If you reside in the EU, USA, or other regions, your data may be transferred internationally to our global partners, subject to adequate data protection safeguards as outlined in relevant data protection laws.

 

5. Data Security

We take the security of your personal data seriously and have implemented reasonable physical, administrative, and technical safeguards to protect it from unauthorized access, loss, alteration, or disclosure. These measures include:

• Encryption of data where necessary.
• Secure storage practices.
• Limited access controls to personnel who need it to perform their duties.
• Regular audits and monitoring of our systems for vulnerabilities.

Despite our efforts, no data transmission or storage method can be guaranteed 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

 

6. Data Retention

We retain your personal data for no longer than necessary to fulfill the purposes outlined in this policy, including for legal or regulatory compliance. After the retention period, we will securely delete or anonymize your personal data, ensuring that it cannot be used or accessed.

 

7. Your Rights

Under the GDPR, HIPAA, and the Data Protection Act, 2018, you have specific rights regarding your personal data, including:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: If your data is inaccurate or incomplete, you can request that we correct or update it.
• Right to Deletion (Right to be Forgotten): You may request that we delete your personal data, subject to certain exceptions (e.g., if we need to retain it for legal reasons).
• Right to Object: You can object to the processing of your personal data in certain circumstances, including for direct marketing purposes.
• Right to Restriction: You can request that we restrict the processing of your data in certain situations (e.g., while we investigate a request for correction).
• Right to Data Portability: You can request that we transfer your data to another provider in a structured, commonly used, and machine-readable format.

If you are located in the European Union, you also have the right to lodge a complaint with the relevant supervisory authority (e.g., the Information Commissioner’s Office).

 

8. Cookies and Tracking Technologies

Our website (www.sh.co.bw) uses cookies and other tracking technologies to enhance your user experience, gather website analytics, and improve functionality. Cookies are small text files that are stored on your device when you visit our website. The types of cookies we use include:

• Necessary Cookies: These cookies are essential for the operation of the website and allow you to navigate and use its features (e.g., session cookies for maintaining login status).
• Performance Cookies: These cookies collect information about how visitors use our website, such as the most visited pages or any error messages encountered. These help us improve the performance and design of the website.
• Functional Cookies: These cookies allow our website to remember your preferences, such as language settings, to enhance your experience.
• Targeting or Advertising Cookies: These cookies are used to deliver advertisements relevant to you, and may track your browsing habits across different websites.

You can manage and control the use of cookies by adjusting your browser settings. Most browsers allow you to refuse cookies or delete existing ones. However, please note that disabling certain cookies may impact your experience on our website and limit some of its functionalities.

For more detailed information, you can review our Cookie Settings or refer to your browser’s help section to manage cookie preferences.

 

9. Policy Updates

We may update this Data Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for operational reasons. All changes will be posted on this page, and the “Effective Date” will be updated. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

 

10. Contact Us

If you have any questions, concerns, or requests regarding this policy or how we process your personal data, please contact us:

Storkfort Health
Plot 50667 | Suite 2 | Medical Mews Fairgrounds
Gaborone, Botswana
Email: hq@storkfort.com
Tel: +267 397-4578
Website: www.sh.co.bw