Adena's Logo

Privacy Policy

Last updated: 1 October 2025

Adena OSH Center ("we", "our", or "us") is committed to protecting the privacy and confidentiality of your personal and health information. This Privacy Policy explains what data we collect, how we use it, and your rights under the Kenya Data Protection Act 2019 and applicable occupational health legislation.

1. Information We Collect

We may collect the following categories of information:

  • Identity data: full name, date of birth, national ID or passport number
  • Contact data: phone number, email address, employer/company name
  • Health data: medical history, examination findings, test results, fitness assessments, and any other clinical information disclosed during your consultation
  • Appointment data: preferred dates, services requested, notes
  • Technical data: anonymised analytics about how visitors use this website (page views, session duration) via privacy-respecting tools

2. How We Use Your Information

We use your information to:

  • Provide occupational health assessments and produce clinical reports
  • Issue DOSHS fitness certificates and official documentation
  • Schedule and confirm appointments
  • Communicate with you about your health care
  • Comply with legal and regulatory obligations (including DOSHS reporting requirements)
  • Improve our services through anonymised trend analysis

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Legal Basis for Processing

We process your data on the following legal bases:

  • Consent: where you have given explicit consent for us to process your health data
  • Contractual necessity: to fulfil our obligations under any service agreement with you or your employer
  • Legal obligation: to comply with DOSHS regulations and other applicable Kenyan law
  • Legitimate interests: for operational purposes that do not override your fundamental rights

4. Health Data (Special Category Data)

Health data receives the highest level of protection under the Kenya Data Protection Act. We treat all clinical information as strictly confidential. Access is limited to the health professionals directly involved in your care and administrative staff on a need-to-know basis. We will only disclose health data to your employer where:

  • You have given explicit written consent; or
  • We are required to do so by law (e.g. notifiable disease reporting)

Importantly, the reports we provide to employers describe fitness for duty — they do not disclose your diagnosis or full medical history without your consent.

5. Data Retention

We retain clinical records for a minimum of seven (7) years from the date of the last consultation, in line with Kenyan medical records legislation. Appointment and contact data is retained for three (3) years from last interaction. You may request deletion of non-clinical data at any time, subject to our legal retention obligations.

6. Data Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Our digital systems use encryption, access controls, and regular security reviews.

7. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

  • Access: request a copy of the personal data we hold about you
  • Rectification: request correction of inaccurate data
  • Erasure: request deletion of your data, subject to legal retention requirements
  • Portability: receive your data in a structured, machine-readable format
  • Objection: object to processing based on legitimate interests
  • Withdraw consent: at any time where processing is based on consent

To exercise any of these rights, contact our Data Protection Officer at info@adenaoshcentre.com.

8. Cookies and Website Analytics

Our website uses only strictly necessary technical cookies. We do not use advertising cookies or cross-site tracking. Any analytics we collect are anonymised and aggregated — they cannot be used to identify you personally.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent revision appears at the top of this page. Continued use of our services after an update constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us: