GDPR Compliance

We are committed to protecting your privacy rights under the General Data Protection Regulation.

Compliant with GDPR (EU) 2016/679

Our GDPR Commitment

Red Ribbon Health is fully committed to complying with the General Data Protection Regulation (GDPR). We recognize the sensitive nature of health data and apply enhanced protection measures beyond standard GDPR requirements.

Your GDPR Rights

Right to Access

You have the right to access all personal data we hold about you.

  • Request a copy of your personal data at any time
  • Receive information about how we process your data
  • Access data in a commonly used electronic format
  • First copy provided free of charge

Right to Rectification

You can correct inaccurate or incomplete personal data.

  • Update your personal information directly in your account
  • Request correction of inaccurate health records
  • Add missing information to your profile
  • We will update data within 30 days of request

Right to Erasure

Also known as the "right to be forgotten".

  • Request deletion of your personal data
  • Complete account deletion removes all associated data
  • Some data may be retained for legal compliance
  • Deletion processed within 30 days

Right to Restriction

You can restrict how we process your personal data.

  • Limit processing while verifying data accuracy
  • Restrict use for specific purposes
  • Maintain data storage without active processing
  • We will notify you before lifting restrictions

Right to Data Portability

Receive your data in a machine-readable format.

  • Export all your health data in JSON or CSV format
  • Transfer data to another health platform
  • Receive data within 30 days of request
  • No charge for data portability requests

Right to Object

Object to certain types of data processing.

  • Object to processing based on legitimate interests
  • Stop direct marketing communications
  • Prevent automated decision-making
  • We will stop processing unless compelling grounds exist

Exercise Your GDPR Rights

To exercise any of your GDPR rights, please contact our Data Protection Officer:

Email

redribbon@doctor4africa.com

Response Time

Within 30 days of request

Supervisory Authority

Right to lodge a complaint with your local data protection authority