Data Protection Terms
Effective Date: September 15, 2026 • Compliant with Botswana Data Protection Act (DPA)
1. Introduction
At MedixFinder, protecting your personal and health data is our highest priority. These Data Protection Terms explain how we collect, use, process, and safeguard your sensitive health data, in strict compliance with relevant laws and the Botswana Data Protection Act (DPA).
2. Data Collection and Lawful Processing
We collect and process personal data strictly to provide you with MedixFinder services. This includes user account data, medicine queries, digital prescriptions, and interactions between patients, licensed pharmacies, wholesale distributors, and medical professionals. Processing is performed securely, lawfully, and transparently.
3. Data Security and Cryptographic Protection
We implement industry-standard cryptographic protection including AES-GCM-256 for offline session storage and TLS 1.3 encryption in transit. Patient health records, triage notes, and prescription uploads are accessible exclusively to authorized healthcare practitioners and the patient.
4. Data Retention and Shredding
Your data is retained only as long as necessary for providing the requested medical services. Upon patient logout or account deletion, local offline tokens and unencrypted caches are permanently and cryptographically shredded in accordance with legal requirements.
5. Third-Party Sharing Restrictions
Your personal health information will never be sold, rented, or traded. We only share data with authorized third-party providers (such as Cloud Firestore and licensed Botswana pharmacies) bound by strict data processing agreements mandating confidentiality.
Contact Data Protection Officer
If you have any questions or queries regarding our Data Protection Terms, please contact our Data Protection Officer:
• E-mail: dpo@medixfinder.com
• Support Desk: support@medixfinder.com