Effective Date: August 2025
Your privacy is important to us at Emrana Health. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website and use our services. We are committed to protecting your privacy and complying with the applicable data protection laws in the countries within which we operate.

1. Information We Collect
We collect only the personal information you knowingly provide to us, such as:Contact details (name, email, phone)Health-related information provided voluntarilyUsage data through cookies and analytics to improve our website functionalityWe do not collect unnecessary or excessive information.

2. How We Use Your Information
Your information is used for purposes including:Providing and improving our healthcare servicesCommunicating with you, including responding to inquiriesComplying with legal obligations and protecting your vital interests in medical emergenciesConducting research or statistical analysis with strict data protection safeguardsWe ensure all processing of your data is lawful, fair, and transparent.

3. Legal Basis for Processing
We rely on one or more of the following legal bases to process your personal data:Your explicit consent, which you can withdraw at any timeProcessing necessary for the provision of healthcare services or medical diagnosis by professionals bound by confidentialityCompliance with legal obligationsProtection of vital interests in emergencies

4. Data Protection Across Regions
Emrana health has established relationships across Africa and the Middle East. Emrana Health commits to respecting these principles and cooperating with regulatory authorities across jurisdictions where applicable. We also acknowledge the ongoing efforts towards harmonizing data protection frameworks.Emrana Health adheres to the applicable data protection laws and regulations in all applicable jurisdictions. This includes taking appropriate steps to notify data subjects of data breaches, conducting risk assessments, and upholding data subject rights as stipulated by local laws.

5. Data Sharing and Transfers
We do not share your personal data with third parties except:With healthcare professionals involved in your care, who are bound by professional codes of conduct and other professional standards as applicableLegal or regulatory authorities if required by lawTrusted service providers under strict confidentiality agreements to support our services

6. Blockchain Technology and Data Privacy
Emrana Health may use or interact with blockchain-based systems to enhance security and transparency of certain data records. Blockchain offers an immutable and secure record, ensuring data integrity; however, it presents unique challenges for data privacy and deletion obligations.
Immutability and Data Deletion: Due to blockchain’s design, data recorded on-chain cannot be easily altered or deleted. This conflicts with rights such as data rectification and the right to be forgotten. To address this, we employ best practices including minimizing personal data stored directly on blockchain ledgers, using hashed or encrypted representations of data on-chain, and retaining personal data off-chain where feasible.
Industry Practices: Other companies employing blockchain technology handle data deletion challenges by using hybrid architectures combining on-chain and off-chain storage, enabling the erasure or modification of off-chain data to comply with deletion requests. Certain technical solutions also involve encryption key management systems where destroying keys effectively renders data inaccessible.
Governance and Controls: We implement technical and organizational measures to ensure that blockchain use complies with applicable data protection laws. This includes conducting data protection impact assessments, defining clear roles for data controllers, and deploying privacy-enhancing technologies.
User Rights: When blockchain technology is involved, exercising data subject rights may require alternative mechanisms such as anonymizing on-chain data or appending corrective transactions rather than deleting original entries.

7. Your Rights You have the right to:
Access your personal data Correct or update incorrect information request deletion of your data ("right to be forgotten") subject to technical feasibility in blockchain contextsRestrict or object to certain types of processingData portability to transfer your data to another providerWithdraw consent at any time without affecting the lawfulness of processing based on prior consentLodge a complaint with a supervisory authority or relevant data protection authority in your region

8. Data Security and Retention
We implement technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including encryption and regular security assessments.Your data is retained only as long as necessary for the purposes outlined or as required by law.

9. Use of Cookies
Our website uses cookies and similar technologies to enhance your experience. You can manage your cookie preferences through your browser settings.

10. Children’s Privacy
We do not knowingly collect or solicit personal information from children under 16 without parental consent.

11. Contact InformationIf you have questions about this Privacy Policy or want to exercise your data protection rights, please contact us at:Privacy Officer
Emrana Health
Email: privacy@emrana.health