Data Protection & Privacy Notice
Medical Access (MA) is registered with the Personal Data Protection Office (PDPO) in Uganda and is committed to treating personal data with integrity, transparency, security and compliance with all personal data protection principles. This Data Protection and Privacy Notice applies to the Medical Access website and all its related sub-domains accessed via web address: www.medical-access.org. Medical Access is a data controller of personal data collected and processed through this website.
Data Controller
The Data Protection and Privacy Act, 2019 of Uganda describes a data controller as a person who alone, jointly with other persons or in common with other persons or as a statutory duty determines the purposes for and the manner in which personal data is processed or is to be processed.
Scope of Personal Data Collected
We collect personal data if you chose to communicate with us through our website ‘Contact Us’ web form. Here are the types of personal data we collect from the data subjects:
Name
Email address
We do not collect personal data through automated means.
Purpose of Personal Data Collection
We collect personal data for the purpose of replying to your query raised via our ‘Contact Us’ web form. This is to enable our customer care team to follow up on any clarification, inquiry or complaint raised. The Legal basis relied upon to collect and process this personal data is ‘legitimate interest’ as defined by the Act. If you elect to receive quarterly communications from Medical Access, your personal information will also be used for that purpose.
Disclosure
We do not share or provide your personal data to any third party.
Protection of Personal Data
Personal data is secured with the standard data security controls and privacy policies to prevent unauthorized access. Medical Access applies adequate security measures and appropriate physical security to protect and secure the data we process.
Your Rights
The Personal Data Protection and Privacy Act of Uganda (2019) provides for data subject rights. If you would like more information as per your rights or to submit a request in line with the provided data subject rights, contact us via dpo@medical-access.org
Data Retention
Personal data provided by users through the ‘Contact Us’ web form will be retained for a period of one year. Personal data will therefore be deleted one year after the request, inquiry or complaint has been resolved.
Contacts Us
The data protection officer can be contacted at dpo@medical-access.org. A complaint can also be filed with our office using the address below:
Attention: Data Protection Officer
Medical Access, Uganda
Plot 26, Nakasero Road
P.O Box 23186, Kampala
Tel: +256 312 207300
Medical Access may at its own discretion, update this Data Protection and Privacy Notice, to reflect changes in our rules and practices.