Data Protection and Privacy

Privacy Policy

DIGAMS is committed to protecting personal and sensitive health data with strong safeguards, lawful processing, and clear accountability.

Effective Date

01/07/2025

Last Updated

01/07/2026

Organization

Impala Healthtech Research Limited

1. About DIGAMS

DIGAMS is a digital health platform that connects clinical care, diagnostics, and pharmacy systems to support evidence-based decision making and antimicrobial stewardship. Given the nature of our services, we process personal and sensitive health data, and we are committed to ensuring its security, confidentiality, and lawful use.

2. Information We Collect

We collect personal data such as names, age, sex, contact details, patient identifiers, location data, and sensitive health data including clinical information, diagnoses, prescriptions, and laboratory results. We may also process biometric and device metadata when integrated tools require it.

3. How We Collect Data

We collect data through direct input by clinicians, pharmacists, or authorized health workers, through laboratory and partner system integrations, and through digitally captured records during service delivery.

4. Purpose of Processing

We process personal data to support clinical decision-making, enable laboratory diagnostics and sample tracking, improve antimicrobial stewardship and analytics, generate aggregated insights for research and public health, ensure system functionality, and meet legal and regulatory obligations.

6. Data Sharing and Disclosure

We may share data with authorized healthcare providers and laboratories, health system partners such as district health offices and public health programs, research institutions in anonymized or approved formats, and technology partners operating under strict data protection agreements. We do not sell personal data.

7. Data Security

We implement strong technical and organizational safeguards including encryption in transit and at rest, role-based access control, multifactor authentication where applicable, secure infrastructure monitoring, audit logging, and data minimization controls.

8. Data Retention

We retain personal data only for as long as necessary to provide healthcare and platform services, fulfill legal and regulatory obligations, and support approved research responsibilities. After this period, data is securely deleted or anonymized.

9. Your Rights

Under the Data Protection and Privacy Act, 2019, you may have the right to access your personal data, request correction of inaccurate data, request deletion where applicable, object to or restrict processing, withdraw consent where relevant, and lodge a complaint.

10. Contact and Complaints

For any data protection requests or concerns, contact Data Protection Officer (DPO), Impala Healthtech Research Limited, via support@digamsapp.com or +256 783 731032. You may also raise a complaint with the Personal Data Protection Office (PDPO) in Uganda if unsatisfied with our response.

11. International Data Transfers

Where data is transferred outside a country, we ensure adequate levels of data protection and appropriate safeguards such as contractual protections and secure infrastructure.

12. Children’s Data

Where DIGAMS is used to support care for children, data is processed in accordance with applicable laws and ethical approvals. Consent is obtained from parents or guardians where required.

13. Updates to this Policy

We may update this Privacy Policy from time to time. Updates will be communicated via the platform or through other appropriate channels.

This page is part of the public DIGAMS website and is intended to provide clear information about how privacy and data protection are handled across the platform.