Privacy Policy

Meditech24 ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our telemedicine platform. We comply with applicable data protection laws including the Protection of Personal Information Act (POPIA) in South Africa, the Nigeria Data Protection Regulation (NDPR), and the Kenya Data Protection Act.

We collect information you provide directly to us, including: **Personal Information:** - Name, email address, phone number - Date of birth and gender - Government ID (for doctor verification) - Profile photo **Health Information:** - Medical history and conditions - Allergies and current medications - Consultation records and notes - Prescriptions **Payment Information:** - Payment method details - Transaction history - Billing address **Technical Information:** - Device information and IP address - Browser type and version - Usage data and analytics

We use the information we collect to: - Provide, maintain, and improve our services - Process transactions and send related information - Connect patients with healthcare providers - Send administrative messages and updates - Respond to comments, questions, and requests - Monitor and analyze trends, usage, and activities - Detect, investigate, and prevent fraudulent transactions - Comply with legal obligations

We may share your information in the following circumstances: **With Healthcare Providers:** We share relevant health information with doctors during consultations to enable them to provide care. **With Service Providers:** We share information with third parties who perform services for us (payment processors, cloud hosting, analytics). **For Legal Compliance:** We may disclose information if required by law or to protect our rights. **With Your Consent:** We share information when you give us specific consent. We never sell your personal information to third parties.

We implement appropriate technical and organizational measures to protect your personal information, including: - End-to-end encryption for video consultations - Encryption at rest and in transit for stored data - Regular security assessments and audits - Access controls and authentication - Staff training on data protection However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Medical records are retained in accordance with applicable healthcare regulations, typically for 7-10 years. You may request deletion of your account and personal data, subject to legal retention requirements.

Depending on your location, you may have rights including: - Access to your personal information - Correction of inaccurate data - Deletion of your data - Data portability - Objection to processing - Withdrawal of consent To exercise these rights, contact us at privacy@meditech24.co.za

Our services are not intended for children under 18 without parental consent. Family profiles allow parents/guardians to manage dependent children's health records.

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

If you have questions about this Privacy Policy or our data practices, contact us at: Email: privacy@meditech24.co.za