Privacy Policy
1. Who we are
EasyaPoint Health Limited ("Easya", "we", "us", "our") operates the Easya Health platform and Care Point network. We are registered in Ghana. Our principal contact address is hello@easyacare.com.
This policy explains what personal and health data we collect, how we use it, how we protect it, and your rights under the Ghana Data Protection Act 2012 (Act 843).
2. Data we collect
Registration data — your full name, date of birth, gender, contact number, and location when you register at a Care Point.
Health data — vital signs (blood pressure, temperature, pulse, oxygen), presenting complaints, consultation notes, diagnoses, and prescriptions recorded during each visit.
Payment data — HMO membership details or cash payment confirmation. We do not store card numbers.
Website data — anonymised usage data (pages visited, browser type, device) collected via cookies. See our Cookie Policy.
3. How we use your data
We use your data to provide and improve your clinical care — registering you, recording vitals, enabling doctor consultations, generating prescriptions, and maintaining your health record across all Care Points.
We may also use anonymised, aggregated data to understand how our service is used and improve clinical outcomes. This data cannot identify you.
We do not sell your data. We do not use your health data for advertising.
4. Who we share your data with
Licensed doctors on the Easya platform — to conduct your consultation.
Referral hospitals — only when a doctor refers you, and only the clinical record relevant to that referral.
Regulatory bodies — if required by law or a court order in Ghana.
We do not share your data with any third party for marketing, research, or commercial purposes without your explicit written consent.
5. How we protect your data
Your health records are encrypted in transit and at rest. Access is restricted to authorised clinical staff only. All Easya platform devices are secured and managed centrally. We conduct regular security reviews.
6. Your rights under the Ghana Data Protection Act 2012
Under Act 843, you have the right to:
- Access a copy of your personal and health data at any time, free of charge
- Request corrections to inaccurate or incomplete records
- Request deletion of your data, subject to our clinical retention obligations
- Withdraw consent for any non-clinical use of your data
- Lodge a complaint with the Data Protection Commission of Ghana
To exercise any of these rights, contact us at governance@easyacare.com. We will respond within 14 working days.
7. Data retention
We retain your health records for a minimum of 10 years from your last consultation, in line with Ghanaian healthcare record-keeping requirements. After this period, records are securely deleted unless you request earlier deletion and there is no legal obligation to retain them.
8. Changes to this policy
We may update this policy from time to time. We will notify you of any material changes via the email address associated with your account or by posting a notice on this page. Continued use of our services after changes are posted constitutes acceptance of the updated policy.
9. Contact us
For any privacy-related questions or requests: governance@easyacare.com
EasyaPoint Health Limited, Accra, Ghana.