← Back

Privacy Policy

Last updated: August 11, 2026
⚠ This policy is a structural draft prepared to establish baseline transparency and consent practices. It has not yet been reviewed by legal counsel. It should be reviewed by a lawyer familiar with Kenya's Data Protection Act, 2019 before being relied upon as a finished compliance document.

INFERAMED HEALTH INTELLIGENCE LIMITED ("Inferamed", "we", "us") operates this website and the Infera AI hospital information system. This policy explains how we handle personal data collected through this public website — visits, contact forms, account access, and similar interactions.

This policy does not cover clinical/patient data. If you are a patient, or a patient's representative, information collected as part of clinical care at a facility using Infera AI is governed by that facility's own patient privacy practices and Kenya's Data Protection Act, 2019 (which classifies health data as sensitive personal data, subject to additional safeguards). Please direct clinical-record questions to the facility directly, not to this website's contact address.

1. Information We Collect

2. How We Use Information

3. Lawful Basis for Processing

We process personal data on the basis of: performance of a contract (for staff accounts), our legitimate interests in operating a secure system, compliance with legal obligations, and — for optional cookies/analytics — your consent, which you may withdraw at any time via the cookie banner or the link at the bottom of this page.

4. Data Retention

We retain website account and access data for as long as needed to operate the system and meet legal and audit obligations, and delete or anonymize it when no longer needed for those purposes.

5. Security Measures

We apply technical and organizational safeguards appropriate to the sensitivity of the data involved, including access controls, encryption of sensitive fields, and audit logging of system access.

6. Sharing & Disclosures

We do not sell personal data. We may share data with service providers who process it on our behalf (e.g. hosting, SMS/communication providers) under contractual confidentiality obligations, or where required by law or to protect the rights, property, or safety of Inferamed, our users, or others.

7. International Transfers

Where any service provider we use processes data outside Kenya, we take steps to ensure an equivalent level of protection is maintained, consistent with the Data Protection Act, 2019.

8. Global Privacy Control

This site detects and honors the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat it as a request to opt out of non-essential cookies and tracking, and display a confirmation that we've done so.

9. Your Rights

Subject to applicable law, you may have the right to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent at any time. To exercise any of these rights, contact us using the details below.

10. How to Submit a Privacy Request

Email [email protected] with your request. We will respond within the timeframe required by applicable law.

11. Complaints

If you believe we have not handled your personal data appropriately, you may lodge a complaint with Kenya's Office of the Data Protection Commissioner (ODPC), or the relevant authority in your jurisdiction.

12. Contact

INFERAMED HEALTH INTELLIGENCE LIMITED
Email: [email protected]

Effective / last updated: August 11, 2026