LabScroll Medicals Privacy Policy
1. Introduction
LabScroll Medical (Pty) Ltd ("LabScroll Medical," "we," "our," or "us") is committed to safeguarding the privacy and personal data of our clients, partners, and stakeholders. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with Rwanda's Data Protection and Privacy Law (Law No. 058/2021 of 13/10/2021).
2. Scope
This policy applies to all personal data processed by LabScroll Medical in the course of our medical diagnostics, forensic, research, and consultancy services across our offices in Nigeria, Rwanda, and Botswana.
3. Data We Collect
We may collect the following categories of personal data:
****Identification Data: Name, date of birth, national ID/passport number.
****Contact Information: Address, phone number, email address.
****Health and Medical Records: Medical history, diagnostic results, treatment information.
****Professional Details: Occupation, employer information, academic affiliations.
****Financial Information: Billing and payment details.
****Technical Data: Information collected through our website, such as IP address, browser type, and operating system.
4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
****Consent: When you have given clear and unambiguous consent for processing your personal data.
****Contractual Necessity: To fulfill our obligations under a contract with you.
****Legal Obligation: To comply with legal and regulatory requirements.
****Vital Interests: To protect your vital interests or those of another person.
****Public Interest: For tasks carried out in the public interest or in the exercise of official authority.
****Legitimate Interests: For our legitimate interests, provided these do not override your fundamental rights and freedoms.
5. Purpose of Data Collection
We collect and process personal data for the following purposes:
****Medical Diagnostics: To provide accurate and timely diagnostic services.
****Forensic Services: To conduct forensic analyses and investigations.
****Research and Training: To engage in medical research and provide training to medical students and professionals.
****Consultancy Services: To offer expert advice and consultancy in medical and forensic fields.
****Regulatory Compliance: To comply with legal obligations and regulatory requirements.
****Communication: To communicate with you regarding our services, updates, and inquiries.
6. Data Sharing and Disclosure
We may share your personal data with:
****Authorized Personnel: Our employees and contractors who require access to perform their duties.
****Affiliated Institutions: Partner universities and research institutions under existing MOUs.
****Regulatory Authorities: Health professions councils and ministries of health as required.
****Third-Party Service Providers: Vetted service providers who assist in our operations, under strict confidentiality agreements.
****Legal Requirements: When required by law or legal processes.
We ensure that any third parties with whom we share personal data uphold equivalent data protection standards.
7. Cross-Border Data Transfers
In accordance with Rwanda's Data Protection and Privacy Law, we may transfer personal data outside Rwanda only when:
****We have obtained authorization from the supervisory authority after providing proof of appropriate safeguards.
****The data subject has given explicit consent.
****The transfer is necessary for the performance of a contract or for the establishment, exercise, or defense of legal claims.
All cross-border data transfers are conducted in compliance with applicable laws and regulations.
8. Data Subject Rights
Under Rwanda's Data Protection and Privacy Law, you have the following rights:
**** Right to Access: To obtain confirmation of whether we process your personal data and access to such data.
**** Right to Rectification: To request correction of inaccurate or incomplete personal data.
**** Right to Erasure: To request deletion of your personal data under certain conditions.
**** Right to Restrict Processing: To request the limitation of processing under specific circumstances.
**** Right to Object: To object to processing based on legitimate interests or for direct marketing purposes.
**** Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format.
**** Right to Withdraw Consent: To withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us using the details provided in Section 12.
9. Data Security
We implement appropriate technical and organizational measures to ensure the security of your personal data, including:
**** Encryption and pseudonymization of sensitive data.
**** Access controls and authentication mechanisms.
**** Regular security assessments and audits.
**** Employee training on data protection and privacy.
In the event of a data breach, we will notify the supervisory authority and affected data subjects in accordance with legal requirements.
10. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
11. Data Protection Officer
In compliance with Article 40 of Rwanda's Data Protection and Privacy Law, we have designated a Data Protection Officer (DPO) responsible for overseeing our data protection strategy and implementation.
Contact Details of the DPO:
Name: Dr. John Doe
Email: [email protected]
Phone: +267 241 7240
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us at:
LabScroll Medical (Pty) Ltd
Address: Plot 14008 CBD Extension, Francistown, Botswana
Phone: +267 241 7240
Email: [email protected]
Website: https://labscrollmedicals.com
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We encourage you to review this policy periodically.