Draft for clinic review
Privacy Policy
Version DRAFT-2026-10-08. This draft is not yet in force. It must be reviewed by the clinic's authorised representative or legal adviser before it is treated as the approved policy. It does not set a retention period, name a processor contract, or replace clinical consent for examination or treatment.
Elshaddai Primary Health Care Centre is the organisation that collects information through this website and the clinic system. Questions about this draft can be sent to elshaddaihealthcarecenter@gmail.com or by calling the clinic numbers published on this website.
Information we collect
Appointment requests collect your name, phone number, optional email, chosen service, preferred date and time, and any optional message. Please do not put diagnoses, medication lists, or other health history in the public form. After you attend, authorised clinic staff record the health information needed for your care in the clinical system. That health information is special personal information.
Why it is processed
Booking details are used to arrange and administer your visit. Clinical records are used for your care. Payments are recorded for the consultation or other service you receive. Marketing messages are sent only if you separately opt in. Appointment booking does not depend on that opt-in. Acknowledging this notice is not the only lawful basis for providing healthcare, and it is not consent for a medical examination, procedure, or disclosure of your medical record.
Who can see it
Clinic staff see only the records their role allows. The public website does not open patient records. The clinic system is hosted by service providers that store the application and its database. The names of those providers, the countries where data is stored, and the written operator agreements still need to be confirmed in the approved policy.
Safeguards, retention and your requests
Access to clinical records is limited by staff role, and sign-in can require a second factor. This draft does not state how long records are kept or when they are deleted. Those periods must be approved before go-live. You may ask the clinic to correct information that is wrong or to tell you what information it holds about you. The clinic will explain the process when you contact it. Complaints about personal information can also be made to the Information Regulator. This draft does not publish a regulator reference number.