Legal
Privacy Policy
Last updated: March 2025. Dekyi Diagnostics processes personal and health data in compliance with the Data Protection Act, 2012 (Act 843) of Ghana and, where applicable, the GDPR.
Compliance and scope
This policy describes how Dekyi Diagnostics collects, uses, and protects your personal and health information. We process data in compliance with the Data Protection Act, 2012 (Act 843) of Ghana and, where applicable, the General Data Protection Regulation (GDPR) and other relevant laws. We are committed to protecting your privacy and the confidentiality of your health information.
Information we collect
We collect information you provide (name, contact details, date of birth, medical history relevant to tests), as well as test results and visit records. Health information is treated as sensitive (special category) data and we process it only where we have a lawful basis and appropriate safeguards. We may collect technical data (e.g. IP address, browser type) when you use our website.
Lawful basis for processing
We process your data on the following bases: (1) Performance of a contract—to provide tests, appointments, and results; (2) Consent—where you have given clear consent (e.g. sharing results with your referring doctor); (3) Legal obligation—where we must retain or disclose data under law; (4) For health data specifically—provision of health care and, where required, your explicit consent or other conditions under applicable data protection law.
How we use your information
We use your information to perform requested tests, report results to you and your referring physician (with consent), manage appointments, process payments, comply with legal obligations, and improve our services. We do not sell your personal or health data. We use data only for the purposes for which it was collected or as otherwise permitted by law.
Sharing and disclosure
We may share information with your referring doctor when you consent, with insurers when you use insurance, with accredited labs for quality assurance, and when required by law (e.g. public health reporting). We do not transfer your data outside Ghana unless necessary and with appropriate safeguards as required by law.
Data security and breach notification
We use technical and organizational measures to protect your data, including secure systems, access controls, and staff training. Your results are stored and transmitted securely. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify the Data Protection Commission (Ghana) and affected individuals where required by law.
Data retention
We retain your personal and health data only for as long as necessary for the purposes set out in this policy or as required by law (e.g. medical record retention). When data is no longer needed, we securely delete or anonymize it in line with our retention schedule.
Your rights
Under the Data Protection Act (Ghana) and, where applicable, the GDPR, you have the right to: request access to your personal data; request correction of inaccurate data; request erasure of your data in certain circumstances; request restriction of processing; request data portability where technically feasible; object to certain processing; withdraw consent where processing is based on consent; and lodge a complaint with the Data Protection Commission (Ghana) or the relevant supervisory authority. To exercise these rights, contact us or our Data Protection Officer using the details below.
Cookies and website
Our website may use cookies for essential functionality and analytics. You can adjust browser settings to limit cookies. See our cookie notice on the site for more details.
Updates
We may update this policy from time to time. The latest version will be posted on this page with an updated date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.
For questions about this policy, to exercise your data protection rights, or to contact our Data Protection Officer, email info@dekyidiagnostics.com or see our Contact page. You may also lodge a complaint with the Data Protection Commission of Ghana if you believe your data has been processed in breach of applicable law.