1. Introduction
BisaDoctor ("we", "our", or "the Platform") is committed to protecting your personal data and health information. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with Ghana's Data Protection Act, 2012 (Act 843) and other applicable laws.
By using BisaDoctor, you consent to the collection and use of your information as described in this policy.
2. Who We Are
BisaDoctor is a digital health platform built to connect patients with verified doctors for chronic disease management, vital tracking, and remote care. We are registered in Ghana and operate under the jurisdiction of Ghanaian law.
Data Controller: BisaDoctor
Contact: +233 55 230 1685
Website: www.bisadoctor.com
3. Information We Collect
3.1 Personal Information
- Full name and preferred name
- Phone number and email address
- Date of birth, gender, and profile photo
- Payment and billing information
3.2 Health Information (Sensitive Personal Data)
- Blood pressure and blood glucose readings
- Body weight, height, and BMI
- Medication details and reminder schedules
- Medical records, allergies, conditions, and surgical history
- Haemoglobin genotype and blood group
- Vaccination status
- Emergency contact information
3.3 Doctor Information
- Medical license number, certificate and specialisation
- School certificate
- ID Card
- Hospital or clinic affiliation
- Years of experience and professional biography
- Availability schedule
3.4 Usage Data
- App usage patterns and feature interactions
- Device type and operating system
- Log data and error reports
4. How We Use Your Information
We use your information for the following purposes:
- To provide and personalise your health tracking experience
- To connect patients with verified doctors
- To send medication reminders and health alerts
- To enable doctor-patient communication
- To generate health trend reports and insights
- To process subscription payments
- To verify doctor credentials and maintain platform integrity
- To comply with legal and regulatory obligations
- To improve our services through anonymised analytics
5. Legal Basis for Processing
Under Ghana's Data Protection Act, 2012 (Act 843), we process your data on the following legal bases:
- Explicit consent — for collecting sensitive health data
- Contractual necessity — to provide the services you have signed up for
- Legal obligation — to comply with applicable Ghanaian laws
- Legitimate interests — to maintain platform security and prevent fraud
6. Sharing Your Information
We do not sell your personal data. We may share your information in the following circumstances:
6.1 With Your Doctor
Health data you share through the platform is visible to your connected doctor(s) for the purpose of providing care.
6.2 With Service Providers
We work with trusted third-party providers for payment processing, cloud storage, and analytics. These providers are contractually bound to protect your data.
6.3 Legal Requirements
We may disclose your information when required by Ghanaian law, court order, or government authority.
7. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Encryption of data in transit and at rest
- Secure authentication and PIN protection
- Access controls limiting who can view sensitive data
- Regular security audits and vulnerability assessments
While we take all reasonable precautions, no digital platform can guarantee absolute security. We encourage you to use a strong PIN and keep your login credentials private.
8. Data Retention
We retain your personal data for as long as your account is active or as required by law. Health records are retained for a minimum of 10 years in accordance with Ghanaian medical record-keeping standards. You may request deletion of your account and associated data at any time, subject to legal retention requirements.
9. Your Rights
Under the Data Protection Act, 2012, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data (right to erasure)
- Withdraw consent at any time
- Object to processing of your data
- Lodge a complaint with the Data Protection Commission
To exercise any of these rights, contact us at +233 55 230 1685.
10. Children's Privacy
BisaDoctor is not intended for use by persons under the age of 18 without parental or guardian consent. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via SMS. Continued use of the platform after changes constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related questions or concerns, please contact:
BisaDoctor Data Protection Officer
Phone: +233 55 230 1685
Website: www.bisadoctor.com