MEDEVICE AFRICA EQUIPNET PLATFORM
PRIVACY POLICY
Last Updated: 10/09/2025
1. INTRODUCTION
Medevice Africa ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy describes how we collect, use, process, and disclose your information, including personal data, in conjunction with your access to and use of the Medevice Africa Equipnet Platform ("Platform").
This policy is framed in compliance with the Data Protection Act, No. 24 of 2019 of the Laws of Kenya ("DPA") and its attendant regulations.
2. DATA CONTROLLER
For the purpose of the DPA, the data controller is Medevice Africa, located at Brookside Park, Matundu Close, Westlands, Nairobi KE.
3. INFORMATION WE COLLECT
We collect information to provide and improve our services. The types of data we collect include:
3.1. Personal Data You Provide to Us:
- Account Information: When you register for an account, we collect information such as your full name, email address, phone number, job title, and the details of your organization (e.g., hospital or clinic name and address).
- Communications: When you contact us or communicate with us in any way, we will collect the information you provide.
3.2. Platform and Service Data:
- Equipment Information: Data related to medical equipment, including inventory lists, serial numbers, manufacturer details, service history, and maintenance requests that you upload or generate on the Platform.
- Transactional Information: Details of service requests, procurement processes, and other transactions conducted through the Platform.
3.3. Information We Collect Automatically:
- Usage Data: We collect information about your interactions with the Platform, such as the pages you view, the features you use, and the dates and times of your visits.
- Log Data and Device Information: We automatically collect log data and device information, including IP address, browser type, operating system, and other technical information.
- Cookies: We use cookies and similar tracking technologies to track activity on our Platform and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
4. HOW WE USE YOUR DATA (PURPOSE OF PROCESSING)
We use the information we collect for the following purposes:
- To provide, operate, and maintain our Platform.
- To manage your account and provide you with customer support.
- To process transactions and send you related information.
- To improve, personalize, and expand our Platform and services.
- To communicate with you, either directly or through one of our partners, for service-related, promotional, and marketing purposes (subject to your consent).
- To monitor and analyze usage and trends to improve your experience.
- To comply with legal obligations and enforce our terms and policies.
5. LEGAL BASIS FOR PROCESSING
Our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it. We will process your data based on:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
- Contract: Where processing is necessary for the performance of a contract to which you are a party.
- Legal Obligation: Where processing is necessary for us to comply with the law.
- Legitimate Interests: Where processing is necessary for our legitimate interests, provided these interests are not overridden by your rights.
6. DATA SHARING AND DISCLOSURE
We do not sell your personal data. We may share your information in the following circumstances:
- With Service Providers: We may share data with third-party vendors and service providers who perform services on our behalf.
- For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
- Business Transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company.
7. DATA RETENTION AND STORAGE
We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Typically, account data is retained for the duration your account is active and for a reasonable period thereafter in case you decide to re-activate the Services.
8. DATA SECURITY
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure.
9. YOUR DATA PROTECTION RIGHTS
Under the Kenyan Data Protection Act, 2019, you have the following rights:
- The right to be informed about the collection and use of your personal data.
- The right to access and receive a copy of your personal data.
- The right to rectification of inaccurate or incomplete personal data.
- The right to erasure (to be forgotten) in certain circumstances.
- The right to restrict processing of your personal data.
- The right to data portability.
- The right to object to the processing of your personal data.
- The right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.
To exercise any of these rights, please contact us using the details below.
10. INTERNATIONAL DATA TRANSFERS
Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
12. CONTACT US
If you have any questions about this Privacy Policy or our data protection practices, please contact our Data Protection Officer at:
Medevice Africa
equipnet@medevice.africa
+254740661985
