Privacy Policy

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare management information platform, including our Provider App, Customer App, and Admin App (collectively, the "Platform").

Hydra ("we," "our," or "us") is committed to protecting the privacy and security of your personal and medical information.

Policy Effective From: 11th January, 2025.

1. APPLICATION OF THIS PRIVACY POLICY

This Privacy Policy applies to the use of our website, Provider App, Customer App, Admin App, and all affiliated platforms owned and operated by us (collectively, the "Platform"), including any related services, sales, marketing, or promotional activities (together, our "Services").

This Platform operates primarily within the healthcare sector, and is available to healthcare providers, patients, and administrators. For our Users, this Privacy Policy is part of our Terms of Use.

When you register for a Hydra account, use our services, or interact with our Platform in any way, we may collect personal information from you, which may include your name, email address, phone number, medical information, banking details, and other information that identifies you (collectively, "Personal Information"

By accessing or using our Services, you agree to this Privacy Policy.

2. GUIDING PRINCIPLES

Hydra is committed to maintaining the highest standards of privacy and data protection in accordance with applicable healthcare privacy laws and regulations. To demonstrate this commitment and create a positive privacy culture within Hydra, we adhere to these fundamental principles:

Lawfulness, fairness, and transparency
Purpose limitation
Data minimization
Storage limitation
Integrity and confidentiality
Accountability
Health and protection

3. INFORMATION WE COLLECT

3.1 Information You Provide Us

You can browse our website without telling us who you are. However, when you create an account or use our Services, we collect information including:

Identity Information: Your name, date of birth, gender, and professional credentials (for healthcare providers)
Contact Information: Email address, phone number, physical address
Medical Information: Health history, records, appointments, and treatment details
Financial Information: Payment details and transaction history
Professional Information: For healthcare providers, we collect licensing and qualification details

3.2 Information We Automatically Collect

Our Platform automatically collects certain information when you visit or use our Services, including:

Device Information: Hardware model, operating system, unique device identifiers
Log Information: IP addresses, browsing behavior, access times
Location Information: General location based on IP address or more precise location if enabled
Usage Information: How you interact with our Platform and Services

3.3 Information From Third Parties

We may receive information about you from:

Other healthcare providers: Within our network
Payment processors and financial institutions: To facilitate transactions
Identity verification services: To confirm your identity
Professional licensing bodies: For credential verification
Your employer: Where relevant

4. HOW WE USE YOUR INFORMATION

4.1 Core Platform Functions

Your Personal Information enables us to deliver our comprehensive healthcare management services. We utilize this information to operate essential platform functions, including managing patient appointments, coordinating healthcare provider schedules, and processing medical records. Our platform facilitates seamless communication between patients and healthcare providers while ensuring secure handling of billing and payment processes.

The core functions of our platform specifically include managing patient visit schedules, coordinating staff assignments, maintaining comprehensive medical records, and enabling efficient healthcare service delivery. All these operations are conducted with the utmost regard for patient privacy and data security.

4.2 Platform Improvement and Development

We continuously work to enhance our services by analyzing how our platform is used. This involves studying usage patterns to improve user experience, developing new features that benefit our healthcare providers and patients, and resolving technical issues promptly.

These improvements are made while maintaining strict data privacy standards and ensuring that any analysis is conducted on appropriately anonymized data where possible.

4.3 Legal and Administrative Purposes

We may use your information to comply with our legal obligations, respond to legal requests, enforce our terms of service, and protect our rights and interests.

This includes maintaining appropriate healthcare records as required by law and responding to regulatory requirements in the healthcare sector.

5. DATA SHARING AND DISCLOSURE

Healthcare Provider Information Sharing

To facilitate effective healthcare delivery, we share relevant medical information with authorized healthcare providers within the Hydra platform who are involved in your care. This sharing is conducted in accordance with healthcare privacy laws and with appropriate security measures in place.

6. THIRD-PARTY SERVICE PROVIDERS

We work with trusted third-party service providers who assist us in delivering our services. These providers may have access to your Personal Information only to perform specific tasks on our behalf and are obligated to protect your information. Our service providers assist with:

Processing payments securely
Storing data with appropriate safeguards
Analyzing platform performance
Providing technical support
Managing cloud infrastructure

7. LEGAL REQUIREMENTS AND BUSINESS TRANSFERS

We may need to disclose your information in certain circumstances, including:

Compliance with applicable laws and regulations
Responding to valid legal requests and court orders
Protecting our rights, privacy, safety, or property
Facilitating corporate transactions such as mergers or acquisitions

8. DATA SECURITY MEASURES

8.1 We implement comprehensive security measures to protect your information, including your sensitive medical data. Our security infrastructure includes:

Advanced encryption for sensitive data transmission and storage
Strict access controls and authentication measures
Regular security assessments and updates
Comprehensive employee training on data protection
Secure data storage systems
Incident response and recovery procedures

8.2 Data Retention Practices

We maintain your information for specific periods determined by various factors, including:

The active status of your account
Legal requirements for medical record retention
Healthcare regulatory compliance needs
Legitimate business purposes

We regularly review our retention practices to ensure we keep your information only as long as necessary for these purposes.

8.3 Your Rights and Choices

We respect your rights regarding your Personal Information. You have the right to:

Access your personal information stored in our systems
Request corrections to inaccurate or incomplete data
Request deletion of your data (subject to legal requirements)
Object to certain types of data processing
Request transfer of your data to other services
Withdraw previous consent for data processing

9. SPECIAL CONSIDERATIONS

9.1 Children's Privacy Protection

Our services are not intended for children under 13 years of age. We do not knowingly collect or maintain information from children under 13 without verifiable parental consent. If we learn that we have collected such information, we will take steps to delete it promptly.

9.2 International Data Transfers

While our platform primarily operates within Africa, we may transfer data internationally as necessary to provide our services. Such transfers are conducted in compliance with applicable data protection laws and with appropriate safeguards in place.

10. UPDATES TO PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify users of any material changes through our platform or via email. Your continued use of our services after such modifications constitutes your acknowledgment of the modified Privacy Policy.