Doctor Privacy Policy

1.Scope of This Policy

This Doctor Privacy Policy supplements, and should be read together with, the general MedPharma Privacy Policy. It explains what we collect about you as a healthcare provider, how we use it, how we share it, and the responsibilities you carry for the patient information you access through the MedPharma Doctor app.

Where this policy and the general Privacy Policy differ in relation to providers, this policy prevails. We process personal data in accordance with Ghana's Data Protection Act, 2012 (Act 843).

2.Information We Collect About You

2.1 Account and professional information

To verify you and enable you to practise on the platform, we collect:

• Name, email address, and phone number;
• Professional credentials — licence / registration number, specialty, qualifications, and regulator details;
• Verification documents you submit during onboarding;
• Payout details for consultation earnings, where applicable.

2.2 Clinical activity you handle

We process the records generated as you deliver care through the app, including appointments and consultation notes, prescriptions you issue and diagnostic orders, and messages, calls, and documents exchanged with patients. This patient information is confidential; you may access and use it only to provide care to the patient concerned and in accordance with your professional obligations.

2.3 Technical information

We automatically collect the technical signals needed to keep the service reliable and secure, including device, operating system, and app version; usage data, diagnostics, and crash reports; and access and audit logs of actions taken in the app.

3.How We Use Your Information

We use the information we collect about you for the following purposes:

• Verification and onboarding. To confirm your identity and credentials, verify your licensure with the relevant regulator, and set up and secure your provider account.
• Enabling care. To match you with patient appointments, deliver consultations, prescriptions, and orders, and maintain accurate clinical records.
• Payments. To calculate and process your earnings, provide statements, and meet tax and accounting obligations.
• Safety and compliance. To monitor for fraud and misuse, maintain audit trails of data access, and respond to legal and regulatory requests.

4.Your Responsibilities for Patient Data

When you access patient information through the platform, you act as a healthcare professional bound by confidentiality. You agree to:

• Access patient data only where necessary to provide care to that patient;
• Keep patient information confidential and handle it in line with the Data Protection Act, 2012 (Act 843) and your professional code of conduct;
• Not download, copy, store, or share patient data outside the platform except as clinically necessary and lawfully permitted;
• Keep your login credentials confidential and never allow another person to act under your account;
• Report any suspected data breach or unauthorised access to MedPharma promptly.

5.How We Share Your Information

We share your information only as needed to operate the platform and meet our obligations:

• With patients you treat — your name, specialty, and relevant professional details are shown to help them make care decisions;
• With regulators and verification partners to confirm your licensure and standing;
• With payment and payout providers to process your earnings;
• With service providers who support the platform under confidentiality obligations;
• As required by law, court order, or a government or regulatory request.

6.How We Protect Your Data

Appointment notes, prescriptions, and uploaded documents are stored in encrypted form — in transit and at rest — on secured servers, and are accessible only to you, your patient, and MedPharma staff bound by clinical-grade confidentiality agreements. Access is protected by strict controls and authentication, and every access is recorded in audit logs so that data handling can be reviewed.

The security of your account also depends on you keeping your credentials confidential. Transmission of information over the internet is never completely secure, so any transmission is at your own risk.

7.How Long We Keep Your Data

We keep your account and professional data for as long as you practise on the platform and as required by law thereafter. Clinical records such as prescriptions and consultation notes are retained for the statutory period required by healthcare regulations — even after your account is closed — so that patient care and audit obligations can be met.

8.Your Rights and Account

Under the Data Protection Act, 2012 (Act 843) you have rights over your personal data, subject to our legal and professional obligations:

• Access and correction — review and update your profile and professional details in the app, and request access to or correction of the data we hold about you;
• Objection and withdrawal — object to certain processing and withdraw consent where processing is based on consent;
• Portability — request the personal data you provided in a structured, commonly used, machine-readable format;
• Account deletion — request deletion of your provider account. Personal and profile data will be deleted, but clinical records you created are retained where required for legal, medical, or auditing purposes.

9.Changes to This Policy

We may update this policy from time to time. When we do, we will adjust the effective date above and, where the change is material, notify you in-app or by email. Continued use of the platform after the change takes effect counts as acceptance.

10.Contact Information

To ask questions about this policy or exercise your rights, contact our Privacy Officer at:

• Email: privacy@medpharma.care
• Phone: +233 50 135 9194 · +233 55 222 0077 · +233 20 245 0446
• Toll-free: 030 290 9731
• Address: Abdul Nasir Street, Accra, Ghana