Implementation notice
This public-site notice is an operational framework and should receive formal legal and data-protection review before Lifam Doctor begins collecting patient information.
1. Scope of this notice
This notice applies to the public information pages on lifam.doctor. Patient accounts, appointment information, medical records, billing and professional administration are intended to operate through separate Lifam Health portals and may require additional privacy notices and consent information.
2. Information on the public website
The public website is designed primarily to provide service information and direct users to the appropriate portal. Visitors should not submit diagnoses, identity documents, test results, prescriptions, photographs or other confidential health details through ordinary email, public comments or unsecured messaging.
3. Health information
Health status is sensitive personal data under Kenya’s data-protection framework. Any future collection or processing should have a defined lawful purpose, be limited to necessary information, use appropriate safeguards and be accessible only to authorised people.
4. Purposes of processing
Where Lifam systems collect information, legitimate purposes may include providing requested care, scheduling, identity and access management, clinical documentation, referral coordination, billing, security, quality improvement, legal compliance and communication directly related to the service.
5. Data minimisation and retention
Only information reasonably necessary for a declared purpose should be collected. Retention periods should reflect clinical, legal, financial and operational requirements. Information should not be kept indefinitely without justification.
6. Sharing and service providers
Information should be shared only when authorised, legally required or necessary for care and operations. Vendors handling information on Lifam’s behalf should be subject to confidentiality, security and data-processing requirements appropriate to their role.
7. Individual rights
Applicable rights may include being informed, requesting access or correction, objecting to certain processing and seeking deletion where the law permits. Some records may need to be preserved because of healthcare, legal or public-interest obligations.
8. Security
Reasonable safeguards should include access control, strong authentication, encryption where appropriate, secure backups, activity logging, staff confidentiality, incident response and regular review. No internet-based service can promise absolute security.
9. Children’s information
Children’s data requires additional protection. Collection should involve an appropriate parent, guardian or lawful basis, account for the child’s best interests and be limited to what the service needs.
10. Privacy-preserving website analytics
Lifam Doctor uses Cloudflare Web Analytics to understand aggregate website use and performance, including visits, page views, referral sources, approximate country, device and browser categories, and Core Web Vitals. Cloudflare states that this service does not collect or use visitors’ personal data and does not track individual visitors across its customers’ websites.
The analytics beacon is used for public-site measurement, not advertising or patient profiling. Do not place names, symptoms, appointment details, medical-record information or other confidential health information in public-page URLs. Patient and provider information must remain within approved secure portals and must not be intentionally sent to public-site analytics.
11. Regulatory information
Kenya’s Office of the Data Protection Commissioner provides information about data-protection rights and obligations at odpc.go.ke.
12. Contact and complaints
Before public collection begins, Lifam Inc should publish verified privacy-contact details, its applicable registration status and a process for requests, complaints and suspected data breaches. Until then, do not send confidential health information through the public website.