Your data, handled with care
Plain-language summary. This is a portfolio demo, so please don't enter real medical information.
What we collect
Your name, email, phone number, bookings, and the skin intake you choose to share (skin type, concerns, allergies, medications, pregnancy status, recent procedures).
Why
To schedule your appointment, take your deposit, and let your specialist treat you safely. Health information is sensitive personal data under Kenya's Data Protection Act, 2019, and we only process it with your explicit consent.
How it's protected
Intake answers are encrypted (AES-256-GCM) before they are stored. Only your assigned specialist and clinic administrators can view them, and every view is logged. Card details are never handled here; M-Pesa payments are processed by Safaricom.
How long we keep it
Booking records are kept for as long as you have an account. You can ask us to correct or delete your data at any time.
Your rights
You can access, correct, or delete your data, withdraw consent, and complain to the Office of the Data Protection Commissioner (ODPC).