Privacy Policy

1. Introduction

At Clinifix, we are committed to protecting your privacy and personal information in accordance with the Data Protection Act 2019 of Kenya and international best practices. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare gig work platform that connects healthcare professionals with locum opportunities.

2. Legal Framework and Compliance

Data Protection Act 2019 Compliance: Clinifix operates in full compliance with Kenya's Data Protection Act 2019, ensuring that all personal data processing activities meet the required legal standards for transparency, security, and user control.

Healthcare Data Standards: As a healthcare platform, we adhere to enhanced security measures and confidentiality requirements that protect sensitive healthcare information and maintain professional standards.

3. Information We Collect

Healthcare Professional Information

• Personal Details: Name, email address, phone number, physical address, and emergency contact information
• Professional Credentials: Medical licenses, certifications, degrees, specializations, and regulatory body registrations
• Employment History: Previous healthcare positions, references, performance records, and professional experience
• Verification Documents: Scanned copies of licenses, certificates, identification documents, and professional references
• Financial Information: Banking details, tax information, and payment preferences for locum payments

Healthcare Facility Information

• Facility Details: Organization name, registration numbers, contact information, and authorized representatives
• Operational Information: Facility type, services offered, staffing requirements, and operational schedules
• Compliance Documentation: Healthcare facility licenses, accreditations, and regulatory compliance certificates

Platform Usage Information

• Technical Data: IP address, browser type, device information, and operating system
• Usage Analytics: Pages visited, time spent on platform, feature usage, and interaction patterns
• Communication Records: Messages between users, support communications, and platform notifications
• Transaction Data: Payment history, locum assignment records, and billing information

4. How We Use Your Information

Platform Operations

• Locum Matching: Connecting healthcare professionals with suitable temporary positions based on qualifications and preferences
• Credential Verification: Verifying professional licenses, certifications, and qualifications through authorized channels
• Account Management: Creating and maintaining user profiles, managing preferences, and providing customer support
• Payment Processing: Facilitating secure payments for locum services and managing financial transactions

Communication and Notifications

• Job Alerts: Sending notifications about relevant locum opportunities and platform updates
• Platform Communications: Providing important information about account status, policy changes, and service updates
• Professional Networking: Facilitating communication between healthcare professionals and facilities

Legal and Regulatory Compliance

• Regulatory Requirements: Complying with healthcare regulations, data protection laws, and professional standards
• Safety and Security: Protecting platform integrity, preventing fraud, and ensuring user safety
• Record Keeping: Maintaining records as required by Kenyan law and healthcare regulations

5. Information Sharing and Disclosure

Healthcare Facilities

We share relevant professional information with healthcare facilities for locum matching purposes, including:

• Professional qualifications and credentials
• Work experience and specializations
• Availability and preferences
• Professional references (with consent)

Verification Partners

We may share information with trusted third-party verification services to confirm:

• Professional licensing and certification status
• Educational qualifications
• Professional standing with regulatory bodies

Legal Requirements

We may disclose information when required by:

• Kenyan law or legal process
• Healthcare regulatory authorities
• Court orders or government investigations
• Protection of rights, safety, or property

6. Data Security and Protection

Technical Safeguards: We implement industry-standard security measures including encryption, secure servers, access controls, and regular security audits to protect your personal information.

Healthcare-Specific Security: Given the sensitive nature of healthcare information, we employ enhanced security protocols that meet or exceed healthcare industry standards for data protection.

Staff Training: All Clinifix employees and contractors are trained on data privacy principles and are bound by confidentiality agreements to protect user information.

7. Data Retention

Active Accounts: We retain personal information for active accounts as long as necessary to provide our services and comply with legal obligations.

Inactive Accounts: Information from inactive accounts may be retained for up to 7 years to comply with healthcare record-keeping requirements and legal obligations.

Legal Requirements: Some information may be retained longer when required by Kenyan law, healthcare regulations, or for legitimate business purposes such as fraud prevention.

8. Your Rights Under Kenyan Law

Under the Data Protection Act 2019 of Kenya, you have the following rights:

Access and Information Rights

• Right to Access: Request access to your personal data and information about how it's processed
• Right to Information: Receive clear information about data collection and processing purposes
• Right to Data Portability: Request transfer of your data to another service provider in a structured format

Control and Correction Rights

• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data under specific circumstances
• Right to Restrict Processing: Request limitation of data processing in certain situations

Consent and Objection Rights

• Right to Withdraw Consent: Withdraw consent for data processing where consent is the legal basis
• Right to Object: Object to certain types of data processing, including direct marketing
• Right to Complain: Lodge complaints with the Office of the Data Protection Commissioner

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your platform experience, including:

• Essential Cookies: Required for platform functionality and security
• Analytics Cookies: Help us understand platform usage and improve services
• Preference Cookies: Remember your settings and preferences

For detailed information about our cookie usage, please see our Cookie Policy.

10. International Data Transfers

Data Localization: We primarily store and process data within Kenya to comply with local data protection requirements.

Cross-Border Transfers: When international transfers are necessary (such as for cloud services or verification), we ensure appropriate safeguards are in place, including:

• Adequacy decisions by Kenyan authorities
• Standard contractual clauses
• Binding corporate rules
• Explicit user consent where required

11. Children's Privacy

Clinifix is designed for healthcare professionals who must be at least 18 years of age. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from someone under 18, we will take steps to delete such information promptly.

12. Changes to This Privacy Policy

Policy Updates: We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors.

Notification Process: Material changes will be communicated through:

• Email notifications to registered users
• Prominent notices on our platform
• In-app notifications
• Updated "Last Modified" date on this policy

13. Contact Us and Data Protection

For any questions about this Privacy Policy, to exercise your data protection rights, or to report privacy concerns, please contact us: