Privacy Policy
Last updated 2 April 2025
Introduction
This Privacy Statement applies to all personal data collected, maintained, transmitted, stored, retained, or otherwise used (i.e., "processed") by Tiberbu HealthNet. Our processing of your personal data is governed by the Kenya Data Protection Act 2019 ("KDPA") and, where applicable, the General Data Protection Regulation ("GDPR"). At Tiberbu HealthNet, we recognize the significance of privacy and are staunchly committed to ensuring the confidentiality, integrity, and security of your personal data. This Statement sets forth the comprehensive data protection and privacy practices that Tiberbu HealthNet has adopted to safeguard your rights.
Information we collect about you
The following categories of personal data may be collected by Tiberbu HealthNet: a) Personal Data directly from you: i. Contact Details: Full name, email address, and phone number, company name, title/role and country are collected when you subscribe to our health services, make an inquiry, share your contact details, or interact with our customer service team. ii. Demo Request Information: Full name, email address, and phone number, company name, title/role, country and reason for request are collected when you request for a demo. b) Personal Data That Is Automatically Collected: Automated technologies may collect data such as your Internet Protocol (IP) address, your device’s internet browser type, and version, your operating system, your browsing activity on our website, and other technical data gathered through cookies and analytics tools.
Lawful basis for information about you
Your personal data is processed on the following lawful bases: Consent: We will ask for your explicit consent for processing certain categories of your personal data. Contractual Necessity: Processing necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract. Legal Obligations: Processing necessary for compliance with a legal obligation to which we are subject. Legitimate Interests: Processing necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
What we use your personal data for
We may use your personal data for purposes including, but not limited to: Adherence to Legal Obligations: Ensuring compliance with legal and regulatory obligations laid out under Kenyan law or any other applicable legislation. Research and Analytical Purposes: Evaluating how customers use our services in order to enhance the quality and user experience of our offerings. Marketing and Communications: Providing updates, promotional material, and relevant health service offers, subject to your preferences and consent. Personalization of Services: Tailoring our services to meet your needs and preferences.
Sharing about you
Personal data collected by Tiberbu HealthNet may be disclosed: a. To third-party service providers and partners who support the operation of our business and provision of services. b. To regulatory authorities, law enforcement agencies, and government bodies when required by law or to protect the rights, property, or safety of Tiberbu HealthNet, our customers, or others. c. In the context of business transfers, such as a merger, acquisition, or asset sale.
How we will protect your information
We implement stringent security measures, including: a. Encryption technologies during data transmission. b. Regular cybersecurity assessments of our infrastructure. c. Employee training on data protection. d. Access controls to ensure that data is only accessible to authorized personnel.
How long we keep information about you
Personal data will be retained only for the minimum period necessary for the purposes for which it was collected, as required by contract or other legal compliance or for any period prescribed by applicable laws. Specifically, for personal data collected for the purpose of a DEMO REQUEST, such information will be deleted immediately after the demonstration has been provided to you. This is to ensure that we do not retain your details for any longer than is necessary for this specific processing activity. For all other data, retention periods shall be determined based on the need to fulfill the purposes outlined in this Privacy Statement, taking into account our need to answer queries or resolve problems, provide improved and new services, and comply with legal requirements under applicable laws. This means that we may retain your personal data for a reasonable period after your last interaction with us. When the personal data that we collect is no longer required in this way, we destroy or delete it in a secure manner.
Your personal data rights
You have the following rights concerning your personal data: a. Access: To be informed of and request access to the personal data we process about you. b. Rectification: To request that we amend or update your personal data where it is inaccurate or incomplete. c. Erasure: To request the deletion of your personal data. d. Restriction: To request that we temporarily or permanently stop processing all or some of your personal data. e. Object: To object to us processing your personal data on grounds relating to your particular situation and to object to your personal data being processed for direct marketing purposes.
Changing consent preferences
You may change your consent preferences or withdraw your consent at any time by contacting us using the details provided below.
How to contact us
For further inquiries or to exercise any of your rights, please contact us at: Email: [email protected] If you have concerns about our processing of your personal data, you are entitled to lodge a complaint with the Kenyan Data Protection Authority. This Privacy Statement is subject to updates and amendments. All modifications will be posted on our website and, if significant, we will provide a more prominent notice. Please be assured that Tiberbu HealthNet is unwavering in its commitment to uphold the privacy and security of your personal data.