Privacy Policy

We collect the following types of information through this website:

• Account Information: Name, email address, and phone number if you create an account (for example, to submit a review).
• Appointment Request Data: Your name, phone number, email, department, preferred doctor, preferred date/time, and any message you include when requesting an appointment online.
• Contact Form Submissions: Your name, email, subject, and message when you send us an enquiry.
• Usage Data: Pages visited, features used, and device/browser information.
• Communications: Messages you send to our reception or support team, or through the virtual health assistant.

This website does not collect detailed clinical records or diagnoses — your full medical file is created and held securely by the hospital once you register as a patient, under separate clinical confidentiality safeguards.

We use your information to:

• Process your appointment request and have our reception team contact you to confirm the date and time.
• Send appointment confirmations and reminders by SMS or email.
• Respond to enquiries submitted through the contact form or virtual health assistant.
• Operate, maintain, and improve this website.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with applicable legal and healthcare regulatory obligations.
• Analyse usage trends to improve the visitor experience (anonymised and aggregated).

We will never sell your personal information to third parties.

We share information submitted through this website only in the following situations:

• Hospital Staff: Appointment requests and enquiries are shared with the relevant reception, billing, or clinical department staff needed to respond to you.
• Service Providers: Trusted partners who help us operate this website and send SMS/email confirmations (e.g., hosting, messaging, and email delivery providers) under confidentiality agreements.
• Legal Requirements: When required by law, regulation, or a valid legal process.
• Business Transfers: In the unlikely event of a merger or change of hospital ownership, information may be transferred as part of that transaction.

We do not share your personal information with third parties for their own marketing purposes.

We implement industry-standard security measures including:

• Encrypted data transmission (TLS/HTTPS).
• Hashed and salted password storage for any account you create.
• Role-based access controls so only authorised staff can see appointment and contact submissions.
• Regular security reviews and updates.

No system is completely secure. If you suspect unauthorised access to your account, contact us immediately at info@generalhospital.test.

We use cookies and similar technologies to:

• Keep you logged in if you have created an account.
• Remember your preferences (e.g., theme settings).
• Analyse site traffic and usage patterns (anonymised).

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality, such as the appointment request form.

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you from your use of this website.
• Correct inaccurate or incomplete data, such as contact details on an appointment request.
• Delete your account and associated data (subject to legal and healthcare record-retention requirements).
• Object to or restrict certain processing activities.

Requests relating to your official medical records at the hospital are handled separately by our health records office. To exercise any of the rights above regarding this website, contact us at info@generalhospital.test.

We retain personal data submitted through this website for as long as necessary to provide our services and comply with legal obligations:

• Account data is retained while your account is active.
• Appointment request and contact form records are retained for administrative and scheduling history.
• Your clinical medical record, once created at the hospital, is retained separately in line with the hospital's health record-keeping policies and applicable healthcare regulations.

When you delete your account, we will delete or anonymise your personal data within 30 days, unless retention is legally required.

This website is not directed at children. Appointment requests or enquiries on behalf of a child should be submitted by a parent or guardian. We do not knowingly collect personal data directly from children through this website. If you believe a child has provided us with personal information directly, please contact us and we will promptly remove it.

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Post the updated policy on this page with a revised "Last updated" date.
• Notify you by email for material changes where appropriate.

Continued use of this website after changes take effect constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: info@generalhospital.test
• Phone: +254 700 000 111

You may also use our contact form to reach us.