Privacy policy

Effective Date: November 1, 2026 Last Updated: November 1, 2026 Website: https://www.nalemcare.com Application: https://app.nalemcare.com Contact Email: naaminlegacy100@gmail.com Telephone: +233 24 788 9984

1. Introduction

Welcome to Nalemcare.

Nalemcare is a healthcare information and management platform designed to help healthcare institutions manage clinical operations, administrative processes, patient records, financial activities, inventory, and institutional reporting through a connected digital system.

At Nalemcare, we recognise the importance of privacy, confidentiality, and responsible management of personal information, particularly information relating to patients and healthcare professionals.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when individuals visit our website, communicate with us, request demonstrations, or use our healthcare management platform.

We are committed to handling personal information responsibly and in accordance with applicable data protection laws, including Ghana's Data Protection Act, 2012 (Act 843).

By using our services, you acknowledge that you have been informed of the data processing practices described in this Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to:

Visitors to the Nalemcare public website.
Individuals requesting product demonstrations or submitting enquiries.
Healthcare institutions engaging with Nalemcare.
Authorised healthcare professionals and administrative personnel using the platform.
Patients whose information is processed through participating healthcare institutions.
Other individuals whose personal information is processed in connection with our services.

Where a healthcare institution uses Nalemcare to manage patient information, that institution generally determines the purposes and permitted uses of the patient information, while Nalemcare processes the information on its behalf under applicable agreements.

3. Information We Collect

Depending on how you interact with Nalemcare, we may process the following categories of information.

3.1 Personal and Contact Information

When you contact us, request a demonstration, or engage with our services, we may collect:

Full name.
Email address.
Telephone number.
Organisation or healthcare facility name.
Professional designation or job title.
Messages, enquiries, and correspondence.
Demonstration preferences.

3.2 Healthcare and Patient Information

Healthcare institutions using Nalemcare may enter and manage information including:

Patient identification and demographic information.
Medical history and clinical documentation.
Diagnoses and treatment records.
Prescriptions and medication information.
Laboratory investigations and results.
Admission, discharge, and appointment information.
Billing, insurance, and claims information.
Other healthcare records necessary for authorised clinical and administrative activities.

Health information is sensitive personal information and requires enhanced confidentiality and protection.

Nalemcare does not independently determine the clinical purposes for which participating healthcare institutions collect and use patient information.

3.3 Staff and User Account Information

We may process information about authorised platform users, including:

Names and professional designations.
Work-related contact information.
Healthcare institution and departmental affiliation.
Assigned roles and access permissions.
Authentication and account information.
Login activity and relevant security audit records.

3.4 Technical and Usage Information

When individuals access our website or platform, we may collect technical information necessary for service delivery, security, and troubleshooting, including:

IP addresses.
Browser and device information.
Access timestamps.
Application error information.
Authentication events.
Security and system activity logs.

The precise information collected depends on the features and technical services in use.

4. How We Use Personal Information

Nalemcare processes personal information for legitimate and authorised purposes, including:

Providing and maintaining the Nalemcare platform.
Supporting healthcare institutions in managing authorised clinical and administrative workflows.
Authenticating users and enforcing role-based access permissions.
Responding to enquiries and demonstration requests.
Providing technical support and customer assistance.
Monitoring platform reliability, performance, and security.
Detecting and investigating unauthorised access or misuse.
Maintaining appropriate records of system activity.
Improving the functionality and usability of our services.
Complying with applicable legal and regulatory obligations.

We do not sell patient medical records or personal information to advertisers or data brokers.

We do not use identifiable patient information for unrelated advertising purposes.

5. Legal Basis for Processing

We process personal information only where an appropriate legal basis exists under applicable law.

Depending on the circumstances, this may include:

Consent, where legally required and appropriately obtained.
Performance of a contract or steps requested before entering a contract.
Compliance with legal obligations.
Legitimate interests where permitted by law and balanced against individuals' rights.
Other lawful grounds applicable to healthcare and sensitive personal information.

Healthcare institutions are responsible for establishing the appropriate legal basis for collecting and processing patient information under their control.

6. Healthcare Institutions and Data Responsibilities

Nalemcare operates as a technology service provider supporting healthcare institutions.

For patient information processed through the platform:

Healthcare institutions generally act as data controllers. They determine why patient information is collected, how it is used, which staff members may access it, and the applicable retention requirements.

Nalemcare generally acts as a data processor. We process patient information on behalf of healthcare institutions according to documented instructions, applicable agreements, and legal requirements.

Nalemcare may act as an independent data controller for its own business operations, including website enquiries, business communications, and certain account administration activities.

Each institution remains responsible for its clinical decisions, patient care obligations, and lawful management of patient records.

7. Information Security

We recognise that healthcare information requires strong safeguards.

Nalemcare's security approach is intended to include appropriate technical and organisational measures such as:

User authentication and access controls.
Role-based permissions.
Encrypted network connections.
Separation of institutional data.
Security logging and monitoring.
Restricted administrative access.
Secure configuration and credential management.
Backup and recovery arrangements.
Periodic security reviews and maintenance.

Specific safeguards are implemented according to the deployed system configuration and applicable service arrangements.

Although we take reasonable measures to protect information, no electronic system or internet transmission can be guaranteed to be completely secure.

Users and healthcare institutions must also protect their account credentials, devices, and local network environments.

8. Confidentiality of Patient Information

Patient confidentiality is fundamental to Nalemcare.

Patient records must be accessed only by individuals who have appropriate authorisation and a legitimate clinical or administrative reason.

Healthcare institutions are responsible for assigning appropriate access permissions to their staff and ensuring that users comply with professional confidentiality obligations.

Nalemcare personnel may access customer information only where appropriately authorised and necessary for legitimate support, security, maintenance, or legal purposes.

Patient information must not be disclosed to unauthorised persons.

9. Sharing and Disclosure of Information

We may disclose personal information only where there is an appropriate legal or contractual basis.

This may include disclosures to:

Authorised personnel within the relevant healthcare institution.
Service providers supporting hosting, infrastructure, communications, or system operations.
Professional advisers subject to appropriate confidentiality obligations.
Regulatory authorities or law enforcement agencies where legally required.
Other parties where valid authorisation or a lawful basis exists.

Service providers processing personal information on our behalf must be subject to appropriate contractual and security requirements.

Nalemcare does not disclose identifiable patient information to unrelated third parties for their independent marketing purposes.

10. Hosting and International Data Transfers

Nalemcare may use third-party technology and infrastructure providers to host and operate its services.

Depending on the hosting arrangements, information may be stored or processed on infrastructure located outside Ghana.

Where personal information is transferred internationally, we will seek to ensure that the transfer complies with applicable data protection requirements and is supported by appropriate safeguards.

Healthcare institutions should be informed of relevant hosting and processing arrangements through their service agreements and associated documentation.

11. Cookies and Similar Technologies

Our public website and application may use cookies or similar technologies for purposes such as:

Maintaining authenticated user sessions.
Supporting security and fraud prevention.
Remembering permitted user preferences.
Maintaining essential website functionality.
Understanding website performance where analytics tools are enabled.

Where legally required, we will request consent before using non-essential cookies.

Users may manage certain cookie preferences through their browser settings, although disabling essential cookies may affect platform functionality.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, contractual, operational, and regulatory requirements.

Retention periods may depend on:

The nature of the information.
Applicable healthcare recordkeeping requirements.
Contractual arrangements with healthcare institutions.
Security and audit obligations.
Legal claims or regulatory requirements.

Patient records are subject to the retention policies and legal obligations applicable to the healthcare institution responsible for those records.

Following termination of a service agreement, the return, retention, deletion, or secure disposal of information will be governed by the applicable agreement and legal requirements.

13. Your Data Protection Rights

Subject to applicable law, individuals may have rights concerning their personal information, including the right to:

Request access to personal information held about them.
Request correction of inaccurate or incomplete information.
Request deletion where legally applicable.
Object to certain processing activities.
Withdraw consent where processing relies on consent.
Raise concerns about how their personal information is handled.
Exercise other rights available under applicable data protection legislation.

Requests concerning patient records should ordinarily be directed to the healthcare institution responsible for those records.

Where Nalemcare receives such a request in its capacity as a data processor, we may refer it to the relevant institution or assist the institution in responding.

14. Data Breaches and Security Incidents

We take suspected security incidents seriously.

Where a security incident affects personal information, we will assess the incident, take appropriate containment and remediation measures, and notify relevant parties where required by applicable law or contractual obligations.

Healthcare institutions and authorised users should promptly report suspected unauthorised access, compromised accounts, or other security concerns.

15. Children's Personal Information

Nalemcare may process information relating to children where healthcare institutions use the platform to provide paediatric, maternity, neonatal, or other healthcare services.

Such information must be processed for legitimate healthcare purposes and protected in accordance with applicable legal requirements.

The public website is intended primarily for healthcare institutions, professionals, and adult business representatives.

16. Third-Party Services and External Links

Our website may contain links to third-party websites or services.

Nalemcare is not responsible for the independent privacy practices of external websites.

We encourage users to review the privacy policies of third-party services before providing personal information.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, operational practices, legal obligations, or security requirements.

Any updated version will be published on our website with a revised effective date.

Where required by law, we will provide additional notice of material changes.

18. Contact Us

For privacy-related questions, requests, or concerns, please contact:

Nalemcare Smart Healthcare. Better Outcomes.

Website: https://www.nalemcare.com Application: https://app.nalemcare.com Email: naaminlegacy100@gmail.com Telephone: +233 24 788 9984 Country: Ghana

Nalemcare — Smart Healthcare. Better Outcomes.

Protecting information. Supporting healthcare. Building trust.