Privacy Policy

1. Introduction

Who We Are

Curis is a digital healthcare platform owned and operated by Citrus Labs Limited, a Kenyan-registered technology company.

Scope of Policy

This Privacy Policy applies to doctors (specialists) who use the Curis platform for professional healthcare services.

Consent to Policy

By creating and using a Curis Doctor account, you consent to the collection, use, and handling of your personal and professional data as outlined herein.

Key Terms

Terms like "Personal Data," "Processing," and "Data Subject" are used as defined under Kenya's Data Protection Act, 2019.

2. Information We Collect

Doctor Profile Information

Account Details: Username, password, and identification documents.
Professional Credentials: License numbers, certifications, and education history.
Contact Information: Email address, phone number, and practice location.

Patient Information (for professional use only)

Personal Identifiers: Names, age, gender, and contact details.
Medical Records: History, treatment plans, prescriptions, and consultation notes.
Appointments: Scheduling data and consultation records.
Preferences: Communication and appointment reminders.

Automatically Collected Data

Device Information: IP address, browser type, operating system.
Log Data: Login timestamps, access records.
Usage Analytics: Features accessed, time spent.
Cookies: Session management and platform enhancement.

3. How We Use Information

Platform Access & Services: Enable consultation scheduling, profile management, and service provisioning.
Operational Communications: Appointment reminders, password resets, and service notifications.
Usage Analysis: Improve user experience and functionality.
Legal Obligations: Maintain regulatory compliance and respond to lawful requests.

4. Information Sharing

Service Providers: ICT and hosting partners under confidentiality agreements.
Legal Requirements: When mandated by court order or regulator.
User Consent: With explicit permission from you.

5. Data Security

Technical Safeguards: Data encryption, firewalls, and secure authentication.
Secure Storage: Servers located within compliant data centers in Kenya.
Data Retention: As long as necessary for legal or contractual reasons.
Notification of Breach: You will be informed within 72 hours in case of a breach involving your data.

6. Your Choices & Rights

Accessing Your Information: Submit a request to view the data we hold.
Updating Your Information: You may correct or update your data via account settings.
Deleting Your Information: You can request deletion subject to legal retention obligations.
Opt-Out: You may opt out of promotional or non-essential communications.
Complaints: File a data privacy complaint with our Data Protection Officer or the Office of the Data Protection Commissioner (ODPC).

7. Policy Updates

Change Process: We may revise this Privacy Policy occasionally.
Notice of Updates: Significant changes will be communicated via email and platform notifications.
Prior Versions: Archived versions are available upon request.

8. Contact Us

Email: legal@citruslabs.co.ke
Phone: +254 112 400 000
Mailing Address: P.O. Box 23983 - 00100, Nairobi, Kenya
Privacy Officer: Available via the email above for data protection inquiries.

Curis Privacy Policy