Privacy Policy

1. Who We Are

Maadili Mema Hospital (formerly Boya Rural Nursing Home) is a private healthcare facility located in the Boya / Ahero area, along the Ahero–Awasi Road, Kisumu County, Kenya.

For the purposes of the Data Protection Act, 2019, Maadili Mema Hospital is the data controller responsible for the personal data collected through this website.

2. Information We Collect

We may collect the following types of personal data when you use our website:

Information you provide directly

• Your name, phone number and email address when you submit an enquiry or appointment request form.
• The service or department you are interested in, and your preferred date and time for an appointment.
• Any message or comment you choose to include in a contact form.

Information collected automatically

• Technical data such as your IP address, browser type, device type, and pages visited on our website.
• This data is collected through standard web server logs and cookies used for website functionality and analytics.

Important: We do not ask for, and strongly discourage you from submitting, confidential medical information through the general contact forms on this website. Clinical information should be discussed directly with our medical team during a consultation or by calling the hospital.

3. How We Use Your Information

We process your personal data for the following purposes:

• To respond to your enquiries and appointment requests.
• To contact you to confirm or rearrange an appointment.
• To improve the content and functionality of our website.
• To comply with legal and regulatory obligations applicable to healthcare facilities in Kenya.

We rely on your consent when you voluntarily submit a form on our website. You may withdraw your consent at any time by contacting us using the details below.

4. How We Protect Your Information

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include:

• Secure HTTPS encryption on this website.
• Restricted access to personal data on a need-to-know basis.
• Regular security monitoring and software updates.

While we strive to protect your information, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of data submitted through online forms.

5. Sharing Your Information

We do not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• With authorised members of our hospital staff who need the information to respond to your enquiry or appointment request.
• With trusted service providers who assist in operating our website and email systems, under confidentiality obligations.
• Where required by law, court order, or a regulatory authority.

6. Data Retention

We retain personal data submitted through website forms only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. When data is no longer needed, we securely delete or anonymise it.

7. Your Rights Under the Data Protection Act, 2019

As a data subject under Kenyan law, you have the following rights:

• Right to be informed — to know how your personal data is being used.
• Right of access — to request a copy of the personal data we hold about you.
• Right to correction — to request correction of inaccurate or misleading data.
• Right to deletion — to request deletion of personal data that we are no longer authorised to retain.
• Right to object — to object to the processing of your personal data.
• Right to withdraw consent — to withdraw consent you have previously given.

To exercise any of these rights, please contact us using the details in section 9 below. We will respond within a reasonable timeframe and in accordance with the Act.

8. Cookies

This website may use cookies and similar technologies to support basic functionality and to understand how visitors use the site. Cookies are small text files stored on your device.

You can configure your browser to refuse cookies or to alert you when cookies are being sent. Disabling cookies may affect certain features of the website, but core content will remain accessible.

9. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or wish to make a complaint about how we handle your personal data, please contact us:

10. Right to Lodge a Complaint

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

Website: www.odpc.go.ke