1. Information We Collect
We collect information to provide safe, effective healthcare services. This may include:
- Account and Contact Information: name, email, phone number, password or authentication details.
- Patient Health Information: symptoms, medical history, consultation notes, prescriptions, lab orders/results, care plans, and related clinical data you or your providers enter into the platform.
- Professional Information (Providers): credentials, specialties, practice details, scheduling and billing information.
- Usage and Device Information: app interactions, crash logs, pages viewed, IP address, device identifiers, browser type, and coarse location derived from your device settings.
- Payment Information: limited billing details processed via trusted payment partners; we do not store full card numbers on our servers.
- Communications: messages, call metadata, and support inquiries with our team or between patients and providers.
2. How We Use Information
- Deliver telehealth services (appointments, messaging, records, e-prescriptions).
- Operate and improve our apps, websites, infrastructure, and security.
- Authenticate users, prevent fraud and misuse, and comply with legal obligations.
- Provide customer support and respond to inquiries.
- Facilitate provider credentialing, scheduling, and payments.
- Generate de-identified or aggregated analytics to enhance quality and access.
- Send service-related notices. With consent where required, send updates and educational content.
3. Legal Bases
We process information based on one or more of the following: your consent; performance of a contract (e.g., providing care or platform access); compliance with legal obligations; protection of vital interests; and our legitimate interests in secure, reliable healthcare delivery, balanced against your rights and expectations.
5. International Transfers
Information may be processed in Australia and other locations where we or our service providers operate. We implement appropriate safeguards for cross-border transfers consistent with applicable laws, and limit access to authorized personnel.
6. Data Retention
We retain information for as long as necessary to provide services, meet legal and regulatory requirements, resolve disputes, and enforce agreements. Retention periods vary by record type and jurisdiction. We take steps to delete or de-identify information when it is no longer needed.
7. Security
We use administrative, technical, and organizational measures designed to protect information, such as encryption in transit, access controls, monitoring, and staff training. No system is perfectly secure; please use strong passwords and keep your account details confidential.
8. Your Privacy Rights
Depending on your location and the services used, you may have rights to access, correct, delete, restrict, or object to certain processing, and to obtain a copy of your information. You may also withdraw consent where we rely on consent. We will honor requests consistent with applicable laws in Zambia, Nigeria, and other relevant jurisdictions.
To exercise rights, contact us at support@aspramed.com. We may need to verify your identity before responding.
9. Children’s Privacy
Our services may be used to provide care to children with the authorization and involvement of a parent or legal guardian and licensed healthcare professionals. We do not knowingly allow children to create accounts without appropriate consent.
11. Third-Party Services
Our services may link to third-party sites or services we do not control. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy with a new “Effective date” and, where required, provide additional notice.
13. Contact Us
Australia (Headquarters); Zambia & Nigeria (Service Markets)
For region-specific questions, contact us and we will route your request appropriately.