Privacy Policy

1. What we collect

When you submit an enquiry or appointment request through this website, we collect the details you provide in the form:

• Your name, email address, and (optionally) phone number
• For appointment requests: your profession, referral source, a brief description of your concerns, and preferred appointment dates or times
• For Institute enquiries: your organization name (optional) and the service you are interested in
• Your message content and any other information you choose to share

2. How we use it

We use submitted information solely to respond to your enquiry, confirm appointment requests, and arrange the follow-up you have asked for. We do not use website enquiry data for marketing, and we do not sell or rent personal information to anyone.

3. Lawful basis and consent

We process your information on the basis of your explicit consent, given when you tick the consent checkbox on the form. You may withdraw that consent at any time by contacting us, after which we will stop processing your enquiry data.

4. Retention

Enquiry information is retained only for as long as needed to handle your request and maintain a record of our correspondence. Information relating to established clinical care becomes part of the clinical record and is retained under applicable clinical record-keeping requirements.

5. Sharing and security

Information you submit is received by FITAHI clinical administration staff and, where relevant, the clinician who will respond to your request. We apply appropriate technical and organizational safeguards to protect personal information from unauthorized access, loss, or disclosure. If a disclosure to a third party (such as a physician or employer) becomes necessary, it happens only with your explicit, informed consent.

6. Your rights

Under the Kenya Data Protection Act (2019), you have the right to:

• Be informed of how your data is used
• Access the personal information we hold about you
• Request correction or deletion of inaccurate or unnecessary data
• Withdraw consent at any time
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

7. Changes to this policy

If we change how we handle website enquiry data, we will update this page. The date at the top of this policy shows when it was last revised.