1. Introduction

PCEA Tumutumu Hospital ("we", "us", "our") is committed to protecting the privacy and confidentiality of personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, book appointments, apply for courses through our College, or interact with our services.

2. Information We Collect

We may collect the following categories of information:

• Contact details such as your name, email address, phone number, and physical address.
• Demographic information such as age, gender, and location where relevant to the service requested.
• Medical information you provide when booking an appointment or seeking care.
• Academic and application information submitted through our College admission process.
• Technical data such as IP address, browser type, and pages visited, collected through cookies and analytics.

3. How We Use Your Information

• To schedule and manage appointments and deliver healthcare services.
• To process College course applications and admissions.
• To respond to enquiries and provide customer support.
• To send relevant updates and notifications, where you have consented.
• To improve our website, services, and user experience.
• To comply with legal and regulatory obligations.

4. Legal Basis for Processing

We process personal information where we have your consent, where processing is necessary to provide the services you have requested, where required by law, or where we have a legitimate interest that does not override your rights and freedoms.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only:

• With service providers who assist us in operating our website and delivering services, under strict confidentiality agreements.
• With healthcare professionals and departments within the hospital as necessary for your care.
• Where required by law, regulation, or legal process.
• With your consent or at your direction.

6. Data Security

We implement appropriate technical and organisational measures to safeguard your personal information against unauthorised access, alteration, disclosure, or destruction. Access to personal data is restricted to authorised personnel on a need-to-know basis.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable laws and regulations governing medical records and academic records.

8. Your Rights

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information, subject to legal and retention requirements.
• Object to or restrict certain processing activities.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the relevant data protection authority.

9. Cookies

Our website may use cookies and similar technologies to enhance your browsing experience and gather analytics. You can control cookie preferences through your browser settings. Disabling cookies may affect some functionality of the website.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not directed to children, and we do not knowingly collect personal information from children without appropriate parental or guardian consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where significant, we will take reasonable steps to notify you. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

• P.O Box Private Bag-10101, Karatina, Nyeri County, Kenya
• 0720 948474
• info@pceatumutumuhospital.org

Governing law: This Policy shall be governed by the laws of the Republic of Kenya, including the Data Protection Act, 2019.