Privacy & Policies

Health information is among the most sensitive data there is. These pages explain, in plain language, how GomoClinic collects, protects and handles it.

Effective 29 October 2026  ·  Governed by the laws of Uganda

Our commitment

Health facilities trust GomoClinic with the most private information people have: their diagnoses, test results, medicines and the details of their care. We treat that trust as the core of the product, not an add-on. The facility using GomoClinic stays in control of its records; we provide the system and protect it.

Need-to-know accessStaff see only the modules and branches their role allows. Nothing is visible by default.
Every change recordedCreating, editing or removing a record is written to an audit trail: who, what, when and from where.
Protected in transitAll traffic is encrypted end to end with HTTPS (TLS).
Built for the lawDesigned around Uganda's Data Protection and Privacy Act, 2019, which treats health data as special personal data.

Read the policies

Each policy is written in plain language. Facilities can share these pages with their staff and patients.

Privacy Policy

What personal and health information is collected, why, who sees it and the rights people have over it.

Data Protection & Security

The technical and organisational safeguards that protect every record in the system.

Confidentiality & Staff Code

The duty of confidentiality every user accepts, and how access is monitored.

Data Processing Agreement

How we process data on behalf of each facility, which stays in control of its records.

Data Retention & Disposal

How long records are kept, and how they are archived or securely disposed of.

Incident & Breach Response

What happens, and who is told, if personal data is ever put at risk.

Cookies & Local Storage

The small number of strictly necessary cookies the system uses, and nothing else.

Terms of Use

The rules for using the system, for facilities and for their staff.