INTRODUCTION

Welcome to Avenues Clinic Website, a service provided by the Avenues Clinic. This privacy notice explains how we collect, use, and share your personal and health information when you use our website. We are committed to protecting your privacy and ensuring the security of your sensitive data

ABOUT THIS PRIVACY NOTICE

This notice applies to your use of the Avenues Website. By using the website, you consent to the processing of your information as described in this notice. We may update this policy from time to time, and your continued use of the Website after any changes constitutes acceptance of the new terms. .

WHO WE ARE

Data Controller: MIL Medical Investments Limited Address: Cnr Mazowe Street /Baines Avenue Harare Box Address: P.O. Box 4880 Harare Email: [email protected]

WHAT PERSONAL INFORMATION WE COLLECT

In general, we collect information that you provide directly to us, information generated through your use of the Website, and, in some cases, information from third parties, such as your healthcare providers.
1. Information you provide

1.1. Identification and Registration Information

a) Medical aid membership number,

b) Full name,

c) Phone number,

d) Email address

1.2. Health Information

a) Information related to your health and wellness, including data from linked health platforms, to help you track your progress.

1.3. Any information you provide when submitting claims, requesting authorization, or engaging with customer support. This is best described as user content,

2. Information collected automatically

2.1. We collect information about your device, such as the model, operating system, and how and when you use the Website. This is used to improve performance, troubleshoot issues, and enhance your user experience

HOW WE USE YOUR PERSONAL INFORMATION

We use your information to provide a service and improve the Website Furthermore, to comply with our legal obligations.
3.1. In providing services we,

Verify your identity for secure access to your account.

Allow you to view our services, benefits, and authorizations.

Enable the submission and tracking of queries.

Provide virtual Health assistance and connect you to Avenues resources.

3.2. To improve the Website we,

Analyze usage patterns to enhance app functionality and user experience.

Monitor website performance and troubleshoot technical issues.

3.3. To communicate with you we will,

Send you notifications related to your, appointments, and policy.

Respond to your inquiries and support requests.

3.4. To ensure compliance and security we,

Comply with regulatory requirements under the Cyber and Data Protection Act. In addition, we have compliance and reporting through breach notification, registration and licensing, ensuring consent and transparency, and audits and transparency.

Implement technical security measures as more specifically detailed in item below.

Implement organizational security measures as we carry out staff training, record keeping and are accountable in terms of data protection

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

HOW WE SHARE YOUR INFORMATION

We do not sell your personal or health information but may share it with healthcare providers and Medical aid providers for processing claims, obtaining authorization for treatment, and coordinating care amongst other things. Aggregated, non-personally identifiable data may be shared for analytics and service improvement. We may also disclose information to comply with legal obligations or to protect our rights. A Data processing agreement will be concluded to safeguard this information transfer. .

YOUR RIGHTS AND CHOICES

Under Zimbabwe’s Cyber and Data Protection Act, you have rights including the right to be informed, access, rectification of false information, objection to processing, and the right to erasure. You can request data deletion by emailing [email protected] and copying the DPO

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

DATA RETENTION AND DELETION

We retain data as long as needed to provide services, fulfill purposes in this notice, or meet legal obligations, such as fraud prevention or legal compliance.

DATA SECURITY

We employ technical and organizational measures to protect your data, including secure storage, password encryption, access controls, and requiring users to keep login credentials secure. In case of a data breach, we will notify POTRAZ within 24 hours.

CHILDREN’S PRIVACY

The Website is not for children under 18 without parental consent, as required by the Cyber and Data Protection Act for processing a child’s data.

CONTACT US

For questions or privacy concerns, contact our Data Protection Officer or support team via email at [email protected], phone at +263 8677 006175, or postal address at Cnr Mazowe Street /Baines Avenue Harare