Domrey Mother & Child Clinic is committed to the responsible handling and protection of your personal data.

The purpose of this Patient Privacy Policy is to ensure that all patients receive respectful and confidential care, with their personal, medical, and financial information protected according to legal and ethical standards. This policy outlines procedures for safeguarding patient privacy in all clinic interactions and care settings, promoting trust and compliance with privacy regulations.

This policy applies to:

1. All clinical, administrative, and support staff within the clinic.
2. All patient interactions, including inpatient, outpatient, and emergency care.
3. All forms of patient information, whether electronic, paper-based, verbal, or visual.

1. Confidentiality and Access Control

   Only authorized personnel may access patient records and information as necessary for the provision of care. Patient information should only be shared with individuals directly involved in the patient’s treatment or for administrative functions, as permitted by regulations and patient consent.

2. Information Collection and Usage

   Collect only essential patient information necessary (such as patient code in the system) for diagnosis, treatment, billing, and healthcare operations. Use patient data solely for the purpose for which it was collected, ensuring patient consent is obtained for any additional uses.

3. Privacy During Consultations and Treatments

   Provide private consultation and examination areas where patient discussions, examinations, and treatments can occur without unauthorized personnel present. All staff members should ensure conversations regarding patient care are conducted discreetly and away from public areas.

4. Patient Rights to Access and Correct Information

   Allow patients or their caregivers to access their medical records upon request and review their health information. Enable patients or their caregivers to correct or update any inaccuracies in their personal information, following verification procedures to ensure data integrity.

5. Data Retention

   Patient information stored in the application and associated cloud systems is retained only for as long as necessary to provide healthcare services, maintain patient records, and comply with applicable legal and regulatory requirements. Patient data will remain stored while the patient account is active or while the information is required for medical record keeping and clinic operations.

6. Data Deletion Requests

   Patients may request deletion of their personal data at any time. Deletion requests can be submitted by contacting the clinic directly through the official clinic contact channels. Upon receiving a valid request, the clinic will review and process the request within a reasonable timeframe. Certain information may be retained where required by medical record regulations, legal obligations, or legitimate healthcare purposes.

7. Privacy Violation Reporting and Resolution

   Establish a confidential process for patients and staff to report privacy violations or concerns. Investigate all reported incidents promptly, take corrective actions, and communicate outcomes with affected parties. Reassess policies regularly to prevent future violations and ensure best practices in patient privacy.

1. Clinic Staff

   All employees must adhere to this privacy policy and participate in mandatory training on patient confidentiality practices.

2. Management

   Management is responsible for monitoring adherence to privacy practices, addressing privacy violations, and updating procedures as needed.