Privacy Policy

1. Introduction

Premium Medical Centre ("we," "us," or "our") is committed to protecting your privacy and personal information in accordance with Botswana's Data Protection Act 18 of 2024. This Privacy Policy explains how we collect, use, store, and protect your personal and health information.

2. Information We Collect

Personal Information:

• Full name, date of birth, and identity document number
• Contact information (address, phone number, email)
• Emergency contact details
• Medical aid or insurance information
• Employment information (where relevant)

Health Information:

• Medical history and current health conditions
• Symptoms, diagnoses, and treatment plans
• Prescription medications and allergies
• Laboratory test results and medical imaging
• Consultation notes and clinical observations
• Billing and payment information

3. Legal Basis for Processing

Under the Data Protection Act 18 of 2024, we process your personal information based on:

• Explicit Consent: You provide clear, informed consent for specific processing activities
• Vital Interests: Processing is necessary to protect your life or health
• Public Health: Processing is required for public health purposes or disease surveillance
• Legal Obligation: We are required by law to process certain health information
• Legitimate Interests: Processing is necessary for healthcare delivery and clinic operations

4. How We Use Your Information

• Providing medical consultations, diagnoses, and treatment
• Maintaining accurate medical records
• Processing laboratory tests and diagnostic procedures
• Coordinating care with other healthcare providers (with your consent)
• Billing and payment processing
• Appointment scheduling and reminders
• Quality improvement and clinical audit
• Compliance with legal and regulatory requirements
• Public health reporting (where mandated by law)

5. Information Sharing

We only share your information in the following circumstances:

• With Your Consent: When you explicitly authorize information sharing
• Healthcare Providers: With specialists, laboratories, or hospitals involved in your care
• Medical Aid Schemes: For claims processing and authorization
• Legal Requirements: When required by court order or Botswana law
• Public Health Authorities: For notifiable diseases and health surveillance
• Emergency Situations: When necessary to protect your vital interests

6. Your Rights as a Data Subject

Under the Data Protection Act 18 of 2024, you have the following rights:

• Right to Information: Know what personal information we hold about you
• Right of Access: Request copies of your medical records
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restrict Processing: Limit how we use your information
• Right to Data Portability: Transfer your data to another healthcare provider
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for specific processing activities

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Secure storage of physical and electronic records
• Access controls and user authentication
• Regular security assessments and updates
• Staff training on data protection and confidentiality
• Secure disposal of confidential information
• Backup and recovery procedures

8. Data Retention

We retain your medical records in accordance with:

• Health Professions Council of Botswana guidelines
• Medical aid scheme requirements
• Legal and regulatory obligations
• Clinical best practices for continuity of care

Generally, adult medical records are retained for a minimum of 7 years after the last consultation, and pediatric records until the patient reaches 25 years of age.

9. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the Data Protection Commissioner within 72 hours
• Inform affected individuals without undue delay
• Take immediate steps to contain and remedy the breach
• Conduct a thorough investigation and implement preventive measures

10. Third-Party Services

We may use third-party services for:

• Laboratory testing and diagnostic services
• Medical aid claims processing
• Appointment scheduling systems
• Secure communication platforms

All third-party processors are required to maintain appropriate data protection standards and comply with Botswana's data protection laws.

11. Contact Information

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes through our website or direct communication.