Privacy and Data Protection

Who we are

Mombasa Kidney Care is run by Daktari Plus, which is the data controller for personal information collected through this website and is registered with the Office of the Data Protection Commissioner (ODPC). We handle your information in line with the Kenya Data Protection Act, 2019.

Contact for privacy questions: hello@mombasakidneycare.co.ke.

What we collect

When you send an enquiry

• The type of care you are looking for, your preferred area and how soon you need care
• Your preferred contact method, your first name, and your phone number or email address
• A record of your consent: the wording you agreed to and the date and time
• The page on this site you came from, and any campaign tags in the link you followed (for example utm_source), so we know which pages help people

Because an enquiry about kidney care relates to your health, we treat it as sensitive personal data. We deliberately do not ask for your medical history, test results, diagnosis, ID number or date of birth. Please do not send them to us.

When you browse the site

Our hosting provider records basic technical information, such as IP address, browser type and pages requested, to run and secure the site. Our pages load fonts from Google Fonts, which means your browser connects to Google's servers. We do not use advertising cookies or tools that track you across other websites.

Why we use it and our lawful basis

We use enquiry details for one purpose: to help you find an appropriate verified kidney care provider in Mombasa and to put you in touch with them. We also use limited records to follow up on whether you were contacted, and to improve the service.

Our lawful basis is your consent. Before you send an enquiry, you tick an unticked box agreeing to this use and to sharing with one matched provider. Your consent must be freely given, specific, informed and clear, and you can withdraw it at any time.

Collecting only what we need

We collect the minimum information needed to connect you with care. The enquiry form has no free-text medical fields, and we do not build profiles of visitors.

Who we share it with

• One verified provider matched to your request. They receive your first name, contact details, the care type, area and timing, and may use them only to contact you about your care.
• Service providers who process data for us, such as website hosting, form handling and database storage. They act on our instructions under written agreements.
• Authorities, only where the law requires it.

We do not sell your information and we do not share it for advertising.

Some of these service providers store data outside Kenya, including in the European Union. We transfer data to them only with appropriate safeguards as required by the Act, and we ask for your consent to this when you send an enquiry.

How long we keep it

We keep enquiry records for 12 months after our last contact with you, then delete them. Consent records may be kept for as long as we need to show that consent was given. Technical logs are kept for up to 90 days.

How we protect it

Data is sent over encrypted connections (HTTPS), stored with access limited to staff who need it, and never placed in web addresses. Providers who receive enquiries must keep them secure.

Your rights

Under the Kenya Data Protection Act, 2019 you have the right to:

• be told how your personal data is used
• access the personal data we hold about you
• object to the processing of your data
• have wrong or misleading data corrected
• have your data deleted
• withdraw your consent at any time
• receive your data in a portable format, where this applies

To use any of these rights, email hello@mombasakidneycare.co.ke with the phone number or email address you used. We may ask you to confirm it is you. We will respond as quickly as we can, and within the time the law requires. If you withdraw consent or ask us to delete your data, we will also tell the matched provider.

Complaints

If you are not happy with how we handled your data, please contact us first. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.

Children

This site is intended for adults. Enquiries about a child should be sent by a parent or guardian.

Changes to this notice

We will update this page if our practices change, and show the date of the latest version at the top.

See also: privacy and consent on the enquiry form, terms of use.