{"id":2954,"date":"2024-10-23T05:51:06","date_gmt":"2024-10-23T02:51:06","guid":{"rendered":"https:\/\/brand2d.tech\/gerties\/?page_id=2954"},"modified":"2024-10-23T05:51:06","modified_gmt":"2024-10-23T02:51:06","slug":"healthcare-privacy-policy","status":"publish","type":"page","link":"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/","title":{"rendered":"Healthcare Privacy Policy"},"content":{"rendered":"[vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_image=”148″ bg_position=”left top” background_image_loading=”default” bg_repeat=”no-repeat” scene_position=”center” top_padding=”5%” constrain_group_1=”yes” bottom_padding=”5%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”10\/12″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]\n
    \n
  1. IMPORTANT INFORMATION\u00a0\u00a0<\/b><\/li>\n<\/ol>\n

    1.1. At Gertrude\u2019s Children\u2019s Hospital (\u201c<\/span>Hospital<\/b>\u201d, \u201c<\/span>we<\/b>\u201d, \u201c<\/span>us<\/b>\u201d, \u201c<\/span>our<\/b>\u201d), our primary goal is to deliver\u00a0 exceptional paediatric healthcare services. To accomplish this, it is necessary for us to collect,\u00a0 use, disclose, transfer, and retain (in other words, <\/span>process<\/b>) information relating to you, whether\u00a0 you are a patient, family member, caregiver, or visitor, for purposes of the care we have provided\u00a0 or plan to provide.\u00a0<\/span><\/p>\n

    1.2. This Privacy Policy lets you know what happens to any <\/span>personal data <\/b>that you may give us or\u00a0 that we may collect from you (or about you or the patient). This Policy is issued by the Hospital as a healthcare provider, and covers the data we hold about our future, current, and former\u00a0 patients, their families, and other individuals who may use our services.\u00a0<\/span><\/p>\n

    1.3. This Privacy Policy will also inform you about your privacy rights and how the law protects you in\u00a0 accordance with the provisions of the Data Protection Act, 2019 (the <\/span>Act<\/b>).\u00a0\u00a0<\/span><\/p>\n

    1.4. This Privacy Policy does not form part of any contract we have with you to provide services.\u00a0\u00a0<\/span><\/p>\n

    1.5. It is crucial that you read this Privacy Policy alongside any other relevant privacy policies or\u00a0 notices that we may provide on specific occasions when collecting or processing your personal\u00a0 data, or the personal data you provide. This ensures that you have a comprehensive\u00a0 understanding of how and why we utilize your information. This Privacy Policy complements such\u00a0 other privacy policies and notices and is not intended to supersede them.\u00a0<\/span><\/p>\n

    1.6. We will regularly review our Privacy Policy. This version was last updated on February 2024.\u00a0\u00a0<\/span><\/p>\n

      \n
    1. WHO WE ARE\u00a0<\/b><\/li>\n<\/ol>\n

      2.1. The Hospital is a \u201c<\/span>data controller<\/i><\/b>\u201d in relation to the processing activities described below. This\u00a0 means that we determine the purpose and means of processing your personal data (or personal\u00a0 data you provide).\u00a0\u00a0<\/span><\/p>\n

      2.2. The Hospital is registered as a \u201c<\/span>data controller<\/span><\/i>\u201d with the Office of the Data Protection\u00a0 Commissioner.\u00a0\u00a0<\/span><\/p>\n

      2.3. Our Data Protection Committee (DPC) is responsible for our data protection function. You can\u00a0 find contact details for our DPC Department team at the end of this Privacy Policy.\u00a0\u00a0<\/span><\/p>\n

        \n
      1. THE TYPES OF PERSONAL DATA THAT WE COLLECT AND PROCESS\u00a0<\/b><\/li>\n<\/ol>\n

        3.1. \u201c<\/span>Personal data<\/b>\u201d means any information that can be used to identify an individual natural person.\u00a0 Please note that there are “<\/span>special categories<\/b>” of personal data that are more sensitive and\u00a0 require a higher level of protection. The personal data we collect will vary according to the\u00a0 circumstances surrounding our relationship with you.\u00a0\u00a0<\/span><\/p>\n

        3.2. We will collect, use, store, transfer or otherwise process personal data about you (or persons\u00a0 connected to you including):\u00a0<\/span><\/p>\n

        (a) <\/span>Personal details about parents\/ care-givers\/ guardians<\/b>: name, title, gender, nationality,\u00a0 marital status, date of birth, age, national identification\/passport number, addresses,\u00a0 telephone numbers, personal email addresses, ID photograph, place of work, details of\u00a0 the third party with parental responsibility over the patient, emergency contact information,\u00a0<\/span><\/p>\n

        2\u00a0<\/span><\/p>\n

        HEALTHCARE PRIVACY POLICY\u00a0<\/span><\/p>\n

        bank account details, medical insurance information, and information about other family\u00a0 members related to the patient.\u00a0\u00a0<\/span><\/p>\n

        (b) <\/span>Health details about parents\/ care-givers\/ guardians: <\/b>details of your or your family\u2019s\u00a0 previous and current medical history that is relevant for the patient\u2019s treatment.\u00a0\u00a0<\/span><\/p>\n

        (c) <\/span>Personal details about patients<\/b>: name, address, date of birth, place of birth, gender, age, race, religious or other beliefs, medical insurance information and information about any\u00a0 disability.\u00a0<\/span><\/p>\n

        (d) <\/span>Health details about patients: <\/b>current and previous medical conditions, details and\u00a0 records of treatment and care\/ notes, health reports including any allergies or health\u00a0 conditions; related information from research\/ clinical trials; results of x-rays, scans, blood\u00a0 tests, or any investigation, genetic information, biometric information, vaccination history\u00a0 and status, and any previous contact that the patient has had with the Hospital through\u00a0 appointments, attendance, or inpatient stays.\u00a0\u00a0<\/span><\/p>\n

        (e) <\/span>Third parties connected to the patients: <\/b>any relevant information about third parties who\u00a0 care for the patient and know them well, such as health professionals, social workers providing social care services, relatives, and care-givers as well as information about any\u00a0 sponsors who will be funding the patient\u2019s treatment.\u00a0\u00a0<\/span><\/p>\n

        (f) <\/span>Monitoring information <\/b>such as:\u00a0<\/span><\/p>\n

        (i) information about your use of our information and communications systems,\u00a0 including your website and system interaction (cookies, internet protocol (IP)\u00a0 address, your login data, browser type and version, time zone setting and location,\u00a0 browser plug-in types and similar technologies),\u00a0\u00a0<\/span><\/p>\n

        (ii) information about your use of the Hospital\u2019s facilities,\u00a0<\/span><\/p>\n

        (iii) information received in response to any surveys or complaint claims,\u00a0<\/span><\/p>\n

        (iv) information gathered through CCTV and building access information.\u00a0<\/span><\/p>\n

        (g) <\/span>Marketing and communications data<\/b>: your preferences for receiving marketing from us\u00a0 and our third parties and your communication preferences.\u00a0\u00a0<\/span><\/p>\n

        3.3. Please note that by providing us with any personal data about a third party, you will be confirming\u00a0\u00a0<\/span><\/p>\n

        (a) that you have obtained the necessary consent from those third parties to the use of their\u00a0 personal data, and\u00a0\u00a0<\/span><\/p>\n

        (b) that the third parties are aware of your actions.\u00a0\u00a0<\/span><\/p>\n

          \n
        1. WHAT HAPPENS IF YOU FAIL TO PROVIDE THE REQUESTED PERSONAL DATA?\u00a0<\/b><\/li>\n<\/ol>\n

          If you do not provide us with the requested personal data, we may be unable,\u00a0\u00a0<\/span><\/p>\n

          (a) to perform the contract that we have with you (such as providing the patient with healthcare\u00a0 services), or\u00a0\u00a0<\/span><\/p>\n

          (b) to comply with our legal obligations as a healthcare provider.<\/span><\/p>\n

          3\u00a0<\/span><\/p>\n

          HEALTHCARE PRIVACY POLICY\u00a0<\/span><\/p>\n

            \n
          1. HOW DO WE COLLECT YOUR PERSONAL DATA (OR PERSONAL DATA YOU PROVIDE)?\u00a0\u00a0<\/b><\/li>\n<\/ol>\n

            5.1. We may collect or receive your personal data (or personal data relating to your personal relations)\u00a0 in a number of different ways:\u00a0<\/span><\/p>\n

            (a) Where you provide the personal data directly to us, for example:\u00a0\u00a0<\/span><\/p>\n

            (i) corresponding with us by phone or email or any virtual platform;\u00a0<\/span><\/p>\n

            (ii) completing forms provided by the Hospital such as the inpatient admission form and\u00a0 the relevant insurance cover form,\u00a0<\/span><\/p>\n

            (iii) during the course of your relationship with us when accessing or using any of our\u00a0 services,\u00a0\u00a0<\/span><\/p>\n

            (iv) using or registering to use our website (<\/span>https:\/\/www.gerties.org\/<\/span>).\u00a0\u00a0<\/span><\/p>\n

            (b) From another healthcare professional you or the patient has seen when the healthcare\u00a0 professional refers the patient to the Hospital for treatment,\u00a0<\/span><\/p>\n

            (c) From third parties, such as other hospitals, outsourced service providers such as the\u00a0 Hospital\u2019s independent consultants, laboratory and diagnostic entities, insurance providers,\u00a0 mental health provides, referral agencies, sponsors, and government departments and\u00a0 agencies,\u00a0\u00a0<\/span><\/p>\n

            (d) From publicly available sources including but not limited to internet search engines, public\u00a0 records and registers and social media accounts (e.g., <\/span>Facebook<\/span><\/i>, <\/span>LinkedIn<\/span><\/i>, and <\/span>Twitter<\/span><\/i>),\u00a0\u00a0<\/span><\/p>\n

            (e) By generating additional information about you or the patient during the period of the\u00a0 patient\u2019s treatment with the Hospital, and\u00a0\u00a0<\/span><\/p>\n

            (f) Where you provide the personal data indirectly to us through monitoring devices or by\u00a0 other means (for example, building and location access control and monitoring systems,\u00a0 CCTV, telephone logs and recordings, instant message logs and email and internet access\u00a0 logs), if and to the extent authorised by applicable laws.\u00a0<\/span><\/p>\n

            5.2. Generally, you have no obligation to provide us with your personal data (or personal data you\u00a0 provide), but if you do not provide us with the information we need, we may be unable to provide\u00a0 you with services.\u00a0\u00a0<\/span><\/p>\n

            5.3. We will seek to minimise the amount of information we request for, to only that which is needed\u00a0 to perform the relevant function or service at the time.\u00a0\u00a0<\/span><\/p>\n

              \n
            1. HOW DO WE USE YOUR PERSONAL DATA (OR PERSONAL DATA YOU PROVIDE)?\u00a0\u00a0<\/b><\/li>\n<\/ol>\n

              6.1. Subject to applicable law including the Act, we may store and process your personal data (or\u00a0 personal data you provide) to support the delivery of appropriate healthcare and treatment as\u00a0 well as for the following purposes:\u00a0<\/span><\/p>\n

              (a) <\/span>Supervision and administration of the patient\u2019s treatment by the Hospital including: <\/b>(i) To help inform decisions that we make about the patient\u2019s care and treatment. (ii) To ensure that the patient\u2019s treatment is safe and effective.<\/span><\/p>\n

              4\u00a0<\/span><\/p>\n

              HEALTHCARE PRIVACY POLICY\u00a0<\/span><\/p>\n

              (iii) To work effectively with other organisations who may be involved in the patient\u2019s care and treatment.\u00a0<\/span><\/p>\n

              (iv) To remind you about appointments and send you correspondence.\u00a0\u00a0<\/span><\/p>\n

              (v) To respond to your inquiries, challenges or requests for feedback received in relation\u00a0 to our care and treatment.\u00a0<\/span><\/p>\n

              (vi) To monitor programmes that require us to ensure equality of opportunity and diversity. (b) <\/span>Continual administration and oversight of the Hospital\u2019s operations including:\u00a0<\/b><\/p>\n

              (i) To support the health of the general public and ensure our services can meet future\u00a0 needs.\u00a0<\/span><\/p>\n

              (ii) To review our care and treatment to ensure it is of the highest standard possible as well\u00a0 as evaluate our current care policies and procedures.\u00a0\u00a0<\/span><\/p>\n

              (iii) To train healthcare professionals.\u00a0<\/span><\/p>\n

              (iv) To conduct clinical research and audits to enable us to understand more about disease\u00a0 risks and causes, improve diagnosis, develop new treatments, and prevent disease.\u00a0\u00a0<\/span><\/p>\n

              (v) To prepare statistics on hospital performance.\u00a0<\/span><\/p>\n

              (vi) To evaluate government policies and to comply with our legal and regulatory obligations\u00a0 as well as following guidance and best practice issued by healthcare bodies.\u00a0<\/span><\/p>\n

              (vii) To support the funding of our operations.\u00a0\u00a0<\/span><\/p>\n

              (viii) To respond to any inquiries, challenges or requests for feedback received in relation to\u00a0 our care and treatment.\u00a0<\/span><\/p>\n

              (ix) To operate security, governance, audit and quality assurance processes and\u00a0 arrangements.\u00a0\u00a0<\/span><\/p>\n

              (x) To compile statistics and conduct research for internal and statutory reporting purposes,\u00a0 for business improvement, and to support changes to service delivery.\u00a0\u00a0<\/span><\/p>\n

              (xi) To fulfil and monitor our responsibilities under the various laws of Kenya.\u00a0\u00a0<\/span><\/p>\n

              (xii) To communicate effectively with you by post, email, and phone. Where appropriate you\u00a0 will be given the opportunity to opt-out of receiving some communications from us.\u00a0\u00a0<\/span><\/p>\n

              (xiii) To comply with our obligations to funders and sponsors (including our disclosure\u00a0 obligations under their terms and conditions and policies).\u00a0\u00a0<\/span><\/p>\n

              (xiv) To manage and maintain your information in hard copy records, files, and systems,\u00a0 including technical support and maintenance of the Hospital\u2019s systems and managing\u00a0 electronic and hard copy records in line with our retention schedules.\u00a0<\/span><\/p>\n

              (xv) For business contingency planning and in response to active incidents. (c) <\/span>Compliance monitoring, security and systems use including:\u00a0<\/b><\/p>\n

              (i) Measuring the performance of our IT systems by monitoring your usage of our systems;\u00a0 this includes analysing time, locations, and activities whilst users are logged into our\u00a0 network.\u00a0<\/span><\/p>\n

              5\u00a0<\/span><\/p>\n

              HEALTHCARE PRIVACY POLICY\u00a0<\/span><\/p>\n

              (ii) Auditing, monitoring, investigation, and compliance monitoring activities in relation to\u00a0 our policies, codes of conduct, applicable law, the prevention, and detection of criminal\u00a0 activity and to protect our assets and premises.\u00a0<\/span><\/p>\n

              (d) <\/span>Responding to legal and regulatory requests including:\u00a0<\/b><\/p>\n

              Complying with lawful requests by public authorities or where otherwise required or\u00a0 authorised by applicable laws, court orders, government regulations, or regulatory\u00a0 authorities (up to and including without limitation data protection, and tax), whether within or\u00a0 outside this country.\u00a0<\/span><\/p>\n

                \n
              1. LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA (OR PERSONAL DATA YOU\u00a0 PROVIDE)\u00a0<\/b><\/li>\n<\/ol>\n

                7.1. We will only collect, use, and share your personal data (or personal data you provide) where we\u00a0 are satisfied that one of the following legal grounds apply to a specific processing activity:\u00a0<\/span><\/p>\n

                (a) The processing is necessary for us to comply with a <\/span>legal obligation <\/b>to which we are\u00a0 subject, for example, complying with public health requirements, defending a legal claim,\u00a0 complying with statutory record keeping and reporting requirements for health and safety\u00a0 obligations.\u00a0<\/span><\/p>\n

                (b) The processing is necessary for the <\/span>performance of a contract <\/b>to which you are a party\u00a0 or to take steps, at your request, prior to entering into such a contract, for example\u00a0 collecting your personal data (or personal data you provide) to provide care and treatment\u00a0 to the patient and the associated billing, accounting, audit, and payment verification.\u00a0\u00a0<\/span><\/p>\n

                (c) The processing is based on your <\/span>consent<\/b>. Where consent is required for the processing\u00a0 in question, it will be sought from you separately to ensure that it is freely given, informed\u00a0 and explicit.\u00a0<\/span><\/p>\n

                In the limited circumstances where you have consented to the processing of your personal\u00a0 data (or personal data you provide) for a specific purpose, you have the right to withdraw\u00a0 your consent at any time. Please note that withdrawing your consent, does not render\u00a0 unlawful our prior handling of your personal data (or personal data you provide) or the\u00a0 processing which is based on other legal justifications.\u00a0<\/span><\/p>\n

                (d) The processing is necessary for the <\/span>legitimate interests <\/b>pursued by us or by a third party,\u00a0 except where such interests are overridden by your interests or rights and freedoms which\u00a0 require protection of personal data. We believe that we have a legitimate interest in\u00a0 processing personal data for the purposes set out above, and to support the achievement\u00a0 of our immediate and long-term business goals and outcomes.\u00a0<\/span><\/p>\n

                (e) The processing is necessary to <\/span>protect your interests <\/b>(or <\/span>someone else’s interests<\/b>).\u00a0<\/span><\/p>\n

                (f) The processing is necessary to perform a task carried out in the <\/span>public interest or for\u00a0 official purposes<\/b>.\u00a0<\/span><\/p>\n

                7.2. Some of the above grounds for processing will overlap and there may be several grounds which\u00a0 justify our use of your personal data (or personal data you provide).\u00a0\u00a0<\/span><\/p>\n

                7.3. In summary, we will process your personal data (or personal data you provide) for the purposes\u00a0 and on the basis of the legal bases set out in the table below:<\/span><\/p>\n

                6\u00a0<\/span><\/p>\n

                HEALTHCARE PRIVACY POLICY\u00a0<\/span><\/p>\n\n\n\n\n\n\n\n
                Purpose of Processing\u00a0<\/b><\/td>\nPersonal Data\u00a0<\/b><\/td>\nLawful Basis for\u00a0\u00a0<\/b><\/p>\n

                Processing<\/b><\/td>\n<\/tr>\n

                Supervision and\u00a0 administration of the patient\u2019s treatment by the\u00a0 Hospital<\/b><\/td>\n\u2219 <\/span>Personal details about parents\/\u00a0 care-givers\/ guardians\u00a0<\/span><\/p>\n

                \u2219 <\/span>Health details about parents\/ care givers\/ guardians\u00a0<\/span><\/p>\n

                \u2219 <\/span>Personal details about patients <\/span>\u2219 <\/span>Health details about patients <\/span>\u2219 <\/span>Third parties related to the patients <\/span>\u2219 <\/span>Monitoring information\u00a0<\/span><\/p>\n

                \u2219 <\/span>Marketing and communications\u00a0 data<\/span><\/td>\n

                		Contractual performance\u00a0 Legitimate interest\u00a0<\/span><\/p>\n

                Compliance with a legal\u00a0 obligation<\/span><\/td>\n<\/tr>\n

                Continual administration and\u00a0 oversight of the Hospital\u2019s\u00a0 operations<\/b><\/td>\n\u2219 <\/span>Personal details about parents\/\u00a0 care-givers\/ guardians\u00a0<\/span><\/p>\n

                \u2219 <\/span>Health details about parents\/ care givers\/ guardians\u00a0<\/span><\/p>\n

                \u2219 <\/span>Personal details about patients <\/span>\u2219 <\/span>Health details about patients <\/span>\u2219 <\/span>Third parties related to the patients <\/span>\u2219 <\/span>Monitoring information\u00a0<\/span><\/p>\n

                \u2219 <\/span>Marketing and communications\u00a0 data<\/span><\/td>\n

                		Contractual performance Legitimate interest\u00a0<\/span><\/p>\n

                Compliance with a legal\u00a0 obligation\u00a0<\/span><\/p>\n

                Consent\u00a0<\/span><\/td>\n<\/tr>\n

                Compliance monitoring,\u00a0 security and systems use<\/b><\/td>\n\u2219 <\/span>Personal details about parents\/\u00a0 care-givers\/ guardians\u00a0<\/span><\/p>\n

                \u2219 <\/span>Personal details about patients <\/span>\u2219 <\/span>Monitoring information<\/span><\/td>\n

                		Contractual performance Legitimate interest\u00a0<\/span><\/p>\n

                Consent\u00a0<\/span><\/p>\n

                Compliance with a legal\u00a0 obligation<\/span><\/td>\n<\/tr>\n

                Responding to legal and\u00a0 regulatory requests<\/b><\/td>\n\u2219 <\/span>Personal details about parents\/\u00a0 care-givers\/ guardians\u00a0<\/span><\/p>\n

                \u2219 <\/span>Personal details about patients <\/span>\u2219 <\/span>Health details about patients <\/span>\u2219 <\/span>Third parties related to the patients<\/span><\/td>\n

                		Contractual performance\u00a0<\/span><\/p>\n

                Compliance with a legal\u00a0 obligation\u00a0\u00a0<\/span><\/p>\n

                Legitimate interest<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                 <\/p>\n

                  \n
                1. CHANGE OF PURPOSE\u00a0<\/b><\/li>\n<\/ol>\n

                  8.1. We will use your personal data (or personal data you provide) solely for the purposes for which\u00a0 it was collected, unless we reasonably believe that we need to use it for another reason that is\u00a0 compatible with the original purpose.\u00a0\u00a0<\/span><\/p>\n

                  8.2. If we need to use your personal data (or personal data you provide) for an unrelated purpose, we\u00a0 will notify you, explain our legal basis for the change and obtain your consent to process your\u00a0 personal data (or personal data you provide) for that unrelated purpose.\u00a0\u00a0<\/span><\/p>\n

                  8.3. Please note that we may process your personal data (or personal data you provide) without your\u00a0 knowledge or consent, in compliance with the above rules, where this is required or permitted by\u00a0 law.\u00a0<\/span><\/p>\n

                  7\u00a0<\/span><\/p>\n

                  HEALTHCARE PRIVACY POLICY\u00a0<\/span><\/p>\n

                    \n
                  1. COOKIES\u00a0<\/b><\/li>\n<\/ol>\n

                    9.1. Please note that in order to improve our internet service to you, we will occasionally use a \u201ccookie\u201d\u00a0 and\/or other similar technologies which may place certain information on your computer\u2019s hard\u00a0 drive when you visit our website or any of the Hospital\u2019s affiliated websites.\u00a0\u00a0<\/span><\/p>\n

                    9.2. A cookie is a small amount of data that our web server sends to your web browser when you visit\u00a0 certain parts of our site.\u00a0\u00a0<\/span><\/p>\n

                    9.3. We use cookies to do many different jobs, like letting you navigate between pages efficiently,\u00a0 identifying you after you have logged in by storing a temporary reference number in the cookie,\u00a0 allowing you to access stored information if you register for any of our online platforms, and\u00a0 generally improving your online experience.\u00a0\u00a0<\/span><\/p>\n

                    9.4. Cookies do not enable us to gather personal information about you unless you give the\u00a0 information to our server. Most Internet browser software allows the blocking of all cookies or enables you to receive a warning before a cookie is stored.\u00a0<\/span><\/p>\n

                      \n
                    1. WHO DO WE SHARE YOUR PERSONAL DATA (OR PERSONAL DATA YOU PROVIDE) WITH?\u00a0\u00a0<\/b><\/li>\n<\/ol>\n

                      10.1. We will disclose your personal data (or personal data you provide) to:\u00a0<\/span><\/p>\n

                      (a) other relatives, care-givers, guardians, or representatives of the patient who are involved\u00a0 in the patient\u2019s care,\u00a0<\/span><\/p>\n

                      (b) healthcare professionals and providers involved in the patient\u2019s care,\u00a0<\/span><\/p>\n

                      (c) public health agencies and authorities.\u00a0<\/span><\/p>\n

                      (d) other hospitals involved in the patient’s care,\u00a0<\/span><\/p>\n

                      (e) referrals such as to specialists,\u00a0\u00a0<\/span><\/p>\n

                      (f) funders and sponsors of the Hospital,\u00a0\u00a0<\/span><\/p>\n

                      (g) sponsors of a patient\u2019s care at the hospital,\u00a0<\/span><\/p>\n

                      (h) our external service providers where we outsource certain services such as the Hospital\u2019s\u00a0 independent consultants, IT service providers, payment processors such as banks,\u00a0 administrative service providers and third-party debt recovery agencies,\u00a0\u00a0<\/span><\/p>\n

                      (i) research organisations,\u00a0\u00a0<\/span><\/p>\n

                      (j) laboratory and diagnostic entities involved in the patient\u2019s care,\u00a0\u00a0<\/span><\/p>\n

                      (k) pharmacies involved in the patient\u2019s care,\u00a0\u00a0<\/span><\/p>\n

                      (l) insurance companies related to a patient,\u00a0\u00a0<\/span><\/p>\n

                      (m) any other relevant professional or statutory regulatory bodies such as the Kenya Medical\u00a0 Practitioners Pharmacists and Dentists’ Union (KMPDU),\u00a0\u00a0<\/span><\/p>\n

                      (n) third parties such as external accountants, auditors, external legal teams, regulators, and\u00a0 other professional bodies. We will do this so that we can comply with any legal obligations,\u00a0<\/span><\/p>\n

                      (o) third parties for our legitimate interests such as where we restructure or buy or sell our\u00a0 business or its assets or have a merger or a re-organization,<\/span><\/p>\n

                      8\u00a0<\/span><\/p>\n

                      HEALTHCARE PRIVACY POLICY\u00a0<\/span><\/p>\n

                      (p) public authorities or governments when required by law, public interest, national security,\u00a0 regulation, legal process, or enforceable governmental request,\u00a0<\/span><\/p>\n

                      (q) establish, exercise, or defend our legal rights including providing information to others\u00a0 and\/or in connection with any ongoing or prospective legal proceedings.\u00a0\u00a0<\/span><\/p>\n

                      10.2. In all the cases cited above, we require all parties we share your personal data (or personal data\u00a0 you provide) with to respect the security of your personal data (or personal data you provide) and\u00a0 treat it in accordance with the law. Please note that we do not allow our external service providers\u00a0 to use your personal data (or personal data you provide) for their own purposes and only permit\u00a0 them to process your personal data (or personal data you provide) for specified purposes and in\u00a0 accordance with our instructions.\u00a0\u00a0<\/span><\/p>\n

                      10.3. Please note that if you request us, in writing, to share your personal data (or personal data you\u00a0 provide) with third parties, we will follow your request to share the relevant information. However,\u00a0 we do not have control over how those third parties will use your information. Before you make\u00a0 your request, we recommend that you (or the person acting on your behalf) consider the data\u00a0 protection practices of that third party by reading their privacy policies or contacting them.\u00a0<\/span><\/p>\n

                        \n
                      1. CROSS BORDER TRANSFER OF PERSONAL DATA\u00a0<\/b><\/li>\n<\/ol>\n

                        11.1. We may transfer your personal data (or personal data you provide) to other hospitals, research, and diagnostic facilities, regulatory, prosecuting, tax and governmental authorities, courts and\u00a0 other tribunals, and other entities located in countries outside Kenya including countries which\u00a0 have different data protection standards to those which apply in Kenya.\u00a0\u00a0<\/span><\/p>\n

                        11.2. When we transfer your personal data (or personal data you provide) outside Kenya to other\u00a0 entities, we will ensure that they protect your personal data (or personal data you provide) in\u00a0 accordance with the requirements under the Data Protection Legislation and that it is kept secure\u00a0 and receives at least a similar level of protection as that which it receives in Kenya.\u00a0\u00a0<\/span><\/p>\n

                          \n
                        1. DATA SECURITY\u00a0<\/b><\/li>\n<\/ol>\n

                          12.1. We have put in place appropriate physical and technical measures to safeguard your personal\u00a0 data (or personal data you provide) from being accidentally lost, used, or accessed in an\u00a0 unauthorised way.\u00a0\u00a0<\/span><\/p>\n

                          12.2. Our IT systems are provided either in-house or by specific suppliers who are required to manage\u00a0 the data securely in a manner compliant with the Data Protection Legislation. We also have\u00a0 perimeter and internal protection of our IT systems and monitor access and security in a proactive\u00a0 manner. Only individuals with legitimate reasons are allowed access to areas storing personal\u00a0 data.\u00a0<\/span><\/p>\n

                          12.3. In addition, we will limit access to your personal data (or personal data you provide) to those\u00a0 employees, consultants, agents, and other third parties that require it for legitimate business\u00a0 purposes. They will only process your personal data (or personal data you provide) on our\u00a0 instructions and they are subject to a duty of confidentiality.\u00a0\u00a0<\/span><\/p>\n

                          12.4. We have put in place procedures to deal with any suspected data security breach and will notify\u00a0 you and any applicable regulator of a suspected breach if required by law.<\/span><\/p>\n

                          9\u00a0<\/span><\/p>\n

                          HEALTHCARE PRIVACY POLICY\u00a0<\/span><\/p>\n

                            \n
                          1. COMMERCIAL USE OF YOUR PERSONAL DATA (OR PERSONAL DATA YOU PROVIDE)\u00a0<\/b><\/li>\n<\/ol>\n

                            13.1. Subject to obtaining your consent and in accordance with your communications preferences, we\u00a0 may use your personal data (or personal data you provide) to send you marketing information on\u00a0 our new facilities, services, and treatments which we think may be of interest to you.\u00a0\u00a0<\/span><\/p>\n

                            13.2. You are free at any time to change your mind and withdraw consent for marketing activities. Please contact <\/span>dpc@gerties.org<\/span>.This will not affect the healthcare services we provide to you.\u00a0<\/span><\/p>\n

                              \n
                            1. THE RETENTION AND STORAGE OF YOUR PERSONAL DATA (OR PERSONAL DATA YOU\u00a0 PROVIDE)\u00a0<\/b><\/li>\n<\/ol>\n

                              14.1. We will only retain your personal data (or personal data you provide) for as long as necessary to\u00a0 accomplish the purposes for which it was collected, including complying with any legal,\u00a0 accounting, or reporting requirements.\u00a0\u00a0<\/span><\/p>\n

                              14.2. To determine the appropriate retention period for personal data, we consider the amount, nature,\u00a0 and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure\u00a0 of your personal data (or personal data you provide), the purposes for which we process your\u00a0 personal data (or personal data you provide) and whether those purposes can be achieved\u00a0 through alternative means, and the applicable legal requirements.\u00a0\u00a0<\/span><\/p>\n

                              14.3. In some circumstances we may anonymise your personal data (or personal data you provide) so\u00a0 that it can no longer be linked to you, in which case we may use such anonymised information\u00a0 without notifying you further. Once our relationship is completed, your personal data (or personal\u00a0 data you provide to us) will be retained and securely destroyed in accordance with our personal\u00a0 data retention schedule.\u00a0\u00a0<\/span><\/p>\n

                                \n
                              1. YOUR LEGAL RIGHTS\u00a0\u00a0<\/b><\/li>\n<\/ol>\n

                                15.1. Subject to certain exceptions and limitations under the law, you have a number of legal rights in\u00a0 relation to the personal data that we hold about you (or persons connected to you). These rights\u00a0 include the right to:\u00a0<\/span><\/p>\n

                                (i) <\/span>be informed <\/b>of the use to which your personal data (or personal data you provide) is to\u00a0 be used;\u00a0\u00a0<\/span><\/p>\n

                                (ii) <\/span>request access <\/b>to your personal data (or personal data you provide) and receive a copy\u00a0 of the personal data we hold about you;\u00a0<\/span><\/p>\n

                                (iii) <\/span>request correction and erasure <\/b>of the personal data that we hold about you;\u00a0<\/span><\/p>\n

                                (iv) <\/span>request the restriction of processing <\/b>of your personal data (or personal data you\u00a0 provide). This enables you to ask us to suspend the processing of your personal data (or\u00a0 personal data you provide);\u00a0<\/span><\/p>\n

                                (v) <\/span>request us to transfer personal data <\/b>either to you or to another company in a commonly\u00a0 used electronic format. This is known as the right to data portability;\u00a0<\/span><\/p>\n

                                (vi) <\/span>object to the processing of your personal data (or personal data you provide)<\/b>; (vii) <\/span>object and opt-out <\/b>of our direct marketing services; and<\/span><\/p>\n

                                10\u00a0<\/span><\/p>\n

                                HEALTHCARE PRIVACY POLICY\u00a0<\/span><\/p>\n

                                (viii) <\/span>request not to be subject to automated decision making<\/b>. This enables you to ask us\u00a0 not to make a decision about you that affects your legal position (or has some other\u00a0 significant effect on you) based purely on automated processing of your data.\u00a0\u00a0<\/span><\/p>\n

                                15.2. To exercise any of these rights, please write to our DPC via the contact details given below.\u00a0\u00a0<\/span><\/p>\n

                                15.3. We will respond to your request without undue delay and no later than the time periods stipulated\u00a0 by the applicable Data Protection Legislation.\u00a0\u00a0<\/span><\/p>\n

                                  \n
                                1. CONTACT US AND FURTHER INFORMATION\u00a0<\/b><\/li>\n<\/ol>\n

                                  16.1. If you have any questions about this Privacy Policy or how we handle your personal data (or\u00a0 personal data you provide), please contact <\/span>dpc@gerties.org<\/span>.\u00a0\u00a0<\/span><\/p>\n

                                  16.2. We will respond to your questions and concerns in a timely manner and in compliance with the\u00a0 relevant laws.\u00a0\u00a0<\/span><\/p>\n

                                    \n
                                  1. CHANGES TO THIS PRIVACY POLICY\u00a0<\/b><\/li>\n<\/ol>\n

                                    17.1. We reserve the right to update this Privacy Policy at any time and we shall notify you of the\u00a0 changes through electronic mail or such other means of communication which may be available\u00a0 to us.\u00a0\u00a0<\/span><\/p>\n

                                    17.2. We may also notify you in other ways from time to time about the processing of your personal\u00a0 data (or personal data you provide).<\/span>[\/vc_column_text][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”2\/12″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"

                                    [vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_image=”148″ bg_position=”left top” background_image_loading=”default” bg_repeat=”no-repeat” scene_position=”center” top_padding=”5%” constrain_group_1=”yes” bottom_padding=”5%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit”…<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-2954","page","type-page","status-publish"],"yoast_head":"\nHealthcare Privacy Policy - Gertrude's Children Hospital<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Healthcare Privacy Policy - Gertrude's Children Hospital\" \/>\n<meta property=\"og:description\" content=\"[vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_image=”148″ bg_position=”left top” background_image_loading=”default” bg_repeat=”no-repeat” scene_position=”center” top_padding=”5%” constrain_group_1=”yes” bottom_padding=”5%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit”...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Gertrude's Children Hospital\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"19 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/\",\"url\":\"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/\",\"name\":\"Healthcare Privacy Policy - Gertrude's Children Hospital\",\"isPartOf\":{\"@id\":\"https:\/\/brand2d.tech\/gerties\/#website\"},\"datePublished\":\"2024-10-23T02:51:06+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/brand2d.tech\/gerties\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Healthcare Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/brand2d.tech\/gerties\/#website\",\"url\":\"https:\/\/brand2d.tech\/gerties\/\",\"name\":\"Gertrude's Children Hospital\",\"description\":\"Quality healthcare for children\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/brand2d.tech\/gerties\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Healthcare Privacy Policy - Gertrude's Children Hospital","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/","og_locale":"en_US","og_type":"article","og_title":"Healthcare Privacy Policy - Gertrude's Children Hospital","og_description":"[vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_image=”148″ bg_position=”left top” background_image_loading=”default” bg_repeat=”no-repeat” scene_position=”center” top_padding=”5%” constrain_group_1=”yes” bottom_padding=”5%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit”...","og_url":"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/","og_site_name":"Gertrude's Children Hospital","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"19 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/","url":"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/","name":"Healthcare Privacy Policy - Gertrude's Children Hospital","isPartOf":{"@id":"https:\/\/brand2d.tech\/gerties\/#website"},"datePublished":"2024-10-23T02:51:06+00:00","breadcrumb":{"@id":"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/brand2d.tech\/gerties\/healthcare-privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/brand2d.tech\/gerties\/"},{"@type":"ListItem","position":2,"name":"Healthcare Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/brand2d.tech\/gerties\/#website","url":"https:\/\/brand2d.tech\/gerties\/","name":"Gertrude's Children Hospital","description":"Quality healthcare for children","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/brand2d.tech\/gerties\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/brand2d.tech\/gerties\/wp-json\/wp\/v2\/pages\/2954","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/brand2d.tech\/gerties\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/brand2d.tech\/gerties\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/brand2d.tech\/gerties\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/brand2d.tech\/gerties\/wp-json\/wp\/v2\/comments?post=2954"}],"version-history":[{"count":0,"href":"https:\/\/brand2d.tech\/gerties\/wp-json\/wp\/v2\/pages\/2954\/revisions"}],"wp:attachment":[{"href":"https:\/\/brand2d.tech\/gerties\/wp-json\/wp\/v2\/media?parent=2954"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}