Privacy Policy
Effective Date: January 1, 2024
1. Introduction
MedVault Limited ("Company," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services. By accessing and using MedVault's website and services, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
When you interact with MedVault, we collect information you voluntarily provide, including:
- Facility information (name, type, region, contact details)
- Contact information (name, phone number, email address)
- Professional information (job title, department, role)
- Quote and order information (products requested, quantities, delivery preferences)
- Communication records (messages, inquiries, feedback)
- Payment and billing information (processed securely through third-party providers)
2.2 Information Collected Automatically
When you visit our website, certain information is collected automatically:
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, time spent, links clicked)
- Cookies and similar technologies (for website functionality and analytics)
- Location information (based on IP address, not precise location)
2.3 Information from Third Parties
We may receive information about you from third parties, including payment processors, logistics providers, and market research firms. This information helps us improve our services and verify customer information.
3. How We Use Your Information
MedVault uses the information we collect for the following purposes:
- Service Delivery: To process your quote requests, orders, and provide customer support
- Communication: To respond to inquiries, send confirmations, and provide product information
- Marketing: To send promotional materials, product updates, and news (only with your consent)
- Analytics: To understand usage patterns and improve our website and services
- Compliance: To meet legal obligations and regulatory requirements in Ghana and across Africa
- Security: To detect, prevent, and address fraud, abuse, and security incidents
- Business Operations: To manage our business, including billing, accounting, and audits
4. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill orders and provide services
- Legitimate Interests: For business operations, security, and fraud prevention
- Legal Compliance: To meet regulatory requirements and protect legal rights
- Consent: For marketing communications and optional services
5. How We Protect Your Information
MedVault implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:
- Encryption of data in transit using SSL/TLS protocols
- Secure data storage with access controls and encryption at rest
- Regular security assessments and vulnerability testing
- Employee training on data protection and privacy best practices
- Compliance with international security standards and best practices
- Incident response procedures for any potential data breaches
While we implement robust security measures, no system is completely impenetrable. We cannot guarantee absolute security of your information.
6. Data Sharing and Disclosure
6.1 Service Providers
We share information with third-party service providers who assist in our operations, including payment processors, logistics companies, and analytics providers. These providers are contractually obligated to maintain confidentiality and use your information only as necessary to provide services.
6.2 Legal Requirements
We may disclose your information when required by law, court order, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, privacy, safety, or property, or that of others.
6.3 Business Transfers
In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
6.4 No Sale of Data
We do not sell, trade, or rent your personal information to third parties for marketing purposes. Your data is treated as a valuable and confidential asset.
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Right of Access: Request a copy of the personal information we hold about you
- Right to Correction: Request correction of inaccurate or incomplete information
- Right to Deletion: Request deletion of your personal information, subject to legal obligations
- Right to Restrict Processing: Request limitation of how we use your information
- Right to Data Portability: Receive your data in a portable format
- Right to Withdraw Consent: Withdraw consent for marketing communications at any time
- Right to Object: Object to processing for legitimate interests
To exercise these rights, please contact us at ampaabeng@medvaultltd.com. We will respond to your request within 30 days.
8. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience and analyze usage patterns. These include:
- Essential Cookies: Required for website functionality
- Analytics Cookies: Help us understand how visitors use our site
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Track effectiveness of promotional campaigns
You can control cookie preferences through your browser settings. However, disabling essential cookies may affect website functionality.
9. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Retention periods vary based on the type of information and our business needs:
- Customer account information: Retained while account is active, then securely deleted
- Quote and order records: Retained for 7 years for legal and tax compliance
- Communication records: Retained for 3 years
- Analytics data: Retained for 1 year
After the retention period, information is securely deleted or anonymized.
10. International Data Transfers
MedVault operates primarily in Ghana but may transfer information to other African countries and internationally for business operations, service delivery, and analytics. When we transfer data across borders, we implement appropriate safeguards, including standard contractual clauses and your consent where required.
11. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy applies only to MedVault's website. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any linked websites before providing personal information.
12. Children's Privacy
MedVault's services are not directed to children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information and terminate the child's account.
13. California Privacy Rights (CCPA)
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of data sales. While MedVault does not operate primarily in California, we extend these rights to all users.
14. Contact Us
For privacy inquiries, requests, or concerns, please contact:
MedVault Limited
P.O.BOX GP 3676 ACCRA
Phone: +233 20 650 8772
Email: ampaabeng@medvaultltd.com
Company Registration No: CS181590921
We will respond to privacy requests within 30 business days. If you are not satisfied with our response, you may lodge a complaint with the appropriate data protection authority.
15. Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the effective date. Your continued use of our services after changes constitutes acceptance of the updated Privacy Policy.
Last Updated: January 1, 2024