At Coptic Hospital, we are dedicated to delivering compassionate and high-quality healthcare to all. In doing so we recognize the importance of protecting the personal and sensitive information of every patient, staff member, partner and vendors or suppliers.
We process personal data in accordance with the Kenyan Data Protection Act, 2019, and its accompanying regulations including the Data Protection (General) Regulations, 2021, and other relevant legal provisions governing data handling in Kenya. Coptic Hospital is duly registered as both a Data Controller and Data Processor under Section 18 of the Act.
Our commitment to protecting your data is woven into every part of our operations. We have appointed a Data Protection Officer (DPO) who can be reached at dpo@coptichospitals.org for any privacy concerns or requests related to your data.
We treat all personal information with care, fairness, and integrity. Whether you are receiving care, applying for a job, supplying goods, or partnering with us, Coptic Hospital upholds the following data protection principles:
Personal data is collected only for clearly defined, lawful, and specific purposes, such as patient treatment, billing, public health reporting, or recruitment. We do not reuse personal data for a purpose incompatible with the original reason for which it was collected, unless we obtain fresh consent or there is a lawful exemption.
We collect only the minimum amount of data necessary to fulfill the intended purpose.
We strive to ensure that all personal data is accurate, complete, and up to date. Inaccurate or outdated data is corrected or deleted without undue delay.
Personal data is retained only for as long as it is needed to fulfill the purpose for which it was collected, or as required by law. Once the retention period lapses, data is either safely deleted or archived in a secure, de-identified format.
We apply strong technical and organizational safeguards to protect personal data against unauthorized access, accidental loss, destruction, or misuse.
Coptic Hospital takes full responsibility for ensuring compliance with the Data Protection Act. We have established governance structures, including the appointment of a Data Protection Officer (DPO).
Names, ID numbers, contacts, addresses, nationality, employment information, etc.
Health records, marital status, religious beliefs, genetic and biometric data, next-of-kin details.
Data will not be transferred outside Kenya unless permitted by law and subject to safeguards.
Our website may use cookies for better user experience. You may disable them in browser settings.
Email: dpo@coptichospitals.org
Phone: +254(0)711043120
