Privacy
Policy
How Syrona Medical Center collects, uses, and protects your personal and medical information.
Last Updated: January 2026
Syrona Medical Center (“we”, “our”, or “us”) is committed to protecting your privacy and the confidentiality of your personal and medical information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our services or visit our website.
1. Information We Collect
-
Personal identification information (name, date of birth, national ID number)
-
Contact details (phone number, email address, physical address)
-
Medical and health information provided during consultations, tests, and treatments
-
Payment information (M-Pesa transaction references, insurance details)
-
Website usage data collected through cookies and analytics tools
2. How We Use Your Information
-
To provide, manage, and improve our medical services and patient care
-
To process appointments, bookings, and payment transactions
-
To communicate with you regarding your health, appointments, and test results
-
To comply with legal and regulatory obligations under Kenyan law
-
To send health tips, appointment reminders, and service updates (with your consent)
3. Information Sharing
-
We do not sell, trade, or rent your personal information to third parties
-
We may share information with referring doctors, specialists, or laboratories as part of your care
-
We may disclose information to insurance providers for claims processing with your consent
-
We may share information with regulatory authorities when required by law
-
All third parties with whom we share data are bound by confidentiality agreements
4. Data Security
-
We implement industry-standard security measures to protect your personal data
-
All medical records are stored securely and accessible only to authorised personnel
-
Our digital systems are protected by encryption, firewalls, and access controls
-
We conduct regular security audits and staff training on data protection
-
In the event of a data breach, we will notify affected individuals as required by law
5. Your Rights
-
Right to access: You may request a copy of the personal data we hold about you
-
Right to correction: You may request correction of inaccurate or incomplete data
-
Right to deletion: You may request deletion of your data, subject to legal obligations
-
Right to object: You may object to certain uses of your data, including marketing
-
To exercise any of these rights, contact us at privacy@syronamedical.co.ke
6. Cookies & Website Data
-
Our website uses cookies to improve your browsing experience and analyse site traffic
-
You may disable cookies through your browser settings, though some features may be affected
-
We use analytics tools to understand how visitors use our website — no personally identifiable information is collected without consent
7. Retention of Data
-
Medical records are retained for a minimum of 7 years as required by Kenyan health regulations
-
Financial records are retained for 7 years in compliance with tax and accounting laws
-
Marketing consent records are retained until you withdraw consent
-
After the retention period, data is securely deleted or anonymised
8. Changes to This Policy
-
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements
-
We will notify you of significant changes by posting a notice on our website or contacting you directly
-
Your continued use of our services after changes are posted constitutes acceptance of the updated policy
Questions About This Policy?
If you have any questions or concerns about our Privacy Policy or how we handle your data, please contact our Data Protection Officer.