Privacy Policy
This policy explains how MedStake Chisipite Clinic ("we", "us", "the clinic") collects, uses, shares and protects your personal and health information when you use our website, WhatsApp consultations and related services. We handle your information in line with Zimbabwe's Cyber and Data Protection Act (Chapter 12:07), 2021 and our duty of medical confidentiality.
1. Who we are
MedStake Chisipite Clinic is a healthcare provider operating in Chisipite, Harare. Consultations and prescriptions are provided by practitioners registered with the Medical and Dental Practitioners Council of Zimbabwe (MDPCZ). We are the data controller responsible for your information.
2. Information we collect
- Identity & contact details — your name, age, sex, and the phone number you contact us on.
- Health information — the symptoms, history and answers you give in the on-site assistant or on WhatsApp, and information needed to prescribe safely.
- Consultation records — messages, prescriptions and notes created during your care.
- Technical information — basic, non-identifying usage data needed to keep the website working.
The on-site assistant runs in your browser. If you describe a symptom in your own words, that text may be sent to a trusted third-party AI service that helps the assistant understand it and direct you to the right care — only the words you type are sent for this, never your name, age or phone number. Your completed questionnaire answers and personal details are only sent to us when you tap "Send to our clinician" and a WhatsApp message opens — nothing else is submitted before you confirm consent.
3. How we use your information
- To assess your symptoms, provide consultations and issue prescriptions where appropriate.
- To screen for danger signs and direct you to emergency care when needed.
- To keep accurate medical records, as required of a registered practice.
- To contact you about your care and follow-up.
4. Sharing your information
We share your information only with:
- The clinicians and clinic staff involved in your care.
- A licensed pharmacy, to dispense any prescription you request.
- Our website's "Book a demo" contact form is delivered to us through a third-party form service (FormSubmit); any details you enter there are processed by that service to reach us.
- A trusted third-party AI service, used only to help the on-site assistant understand a symptom you type in your own words and route you to the right care. Only that text is sent — not your name, age or phone number — and it is processed under the provider's own security and privacy terms; it is not used to identify you.
- Authorities or other parties where we are required to by law, or to protect your vital interests in an emergency.
WhatsApp messages are delivered through Meta's WhatsApp service and are subject to its end-to-end encryption and its own privacy terms.
5. How we protect your information
We apply reasonable technical and organisational measures to keep your information secure, limit access to those who need it for your care, and retain medical records only for as long as required by law and good clinical practice.
6. Your rights
Under the Cyber and Data Protection Act you may ask to access the information we hold about you, ask us to correct it, or ask us to delete it where we are not legally required to keep it. To make a request, contact us using the details below.
7. Children
We do not provide online prescriptions to people under 18 without a parent or guardian involved. If we learn that a user is under 18, we will pause the consultation and ask for a parent or guardian.
8. Changes to this policy
We may update this policy from time to time. The "last updated" date above shows when it last changed.
9. Contact us
For any privacy question or request, contact us at comms@medstake.com or on WhatsApp at 077 127 4467.