Privacy Policy

We RX Health (“RX Health”, “we,” “our” or “us”) respects your privacy. This Policy applies to the RX Health website, platforms that display or provide links to this Policy and services.

We recognize the expectations of its customers with regard to privacy, confidentiality and security of their personal information that resides with us. Keeping personal information of customers secure and using it solely for activities related to our services and preventing any misuse thereof is our top priority.

We have adopted this policy aimed at protecting the personal information entrusted and disclosed by customers. This Privacy Policy governs our data collection, processing and usage of your data and describes your choices regarding use, access and correction of your personal information.

This Policy describes how we process your personal data and aims to address all possible data processing scenarios. RX Health may inform you of product- or service-specific data collection through supplementary policies or notices provided before collection.

This Policy describes:

1. How We Collect & Use Your Personal Data
2. Cookies & Similar Technologies
3. How We Disclose Personal Data
4. How to Access & Control Your Personal Data
5. How We Protect Your Personal Data
6. How We Process Children's Personal Data
7. Third-Party Providers and Their Services
8. International Transfers of Your Personal Data
9. Updates to This Policy
10. How to Contact Us

1. Personal Data: Data that can identify a natural person either alone or with other data.
2. Cookies: A small text file placed on your computer or device by our site.
3. Data Controller: Entity that determines how and why personal data is processed.
4. Data Processor: Entity authorized to process personal data on behalf of the controller.
5. Data Subject: Any living individual who is the subject of personal data.
6. User: Individual using our service and who is the data subject.
7. We / Us / Our: Refers to RX Health.

This Privacy Policy applies to all entities of RX Health in all areas of operation.

1. The policy applies to all RX staff and governance members.
2. The policy also applies to those seeking employment through submission of job applications with RX Health.
3. The provision of this policy may also be applied to any person employed by an entity that carries out work for RX Health. 
4. This policy applies to implementing partners, suppliers, assignees, stakeholders and other associated entities. 
5. RX Health’s Privacy Policy applies to all personal data that the Authority holds relating to identifiable individuals, meaning any information relating to an identified or identifiable individual.
6. This Privacy Policy comprises the internationally accepted data privacy principles without replacing the existing national laws. It supplements the national data privacy laws. The relevant national law will take precedence if it conflicts with this Privacy Policy, or it has stricter requirements than this Policy.  
7. The content of this Privacy Policy must also be observed in the absence of corresponding national legislation. The reporting requirements for data processing under national laws must be observed. Each entity of RX Health, including network and branch offices is responsible for compliance with this Privacy Policy and the legal obligations. 

We established this Privacy Policy for the purposes of demonstrating our commitment to compliance with the applicable data protection laws in Rwanda as well as the contractual terms agreed between RX Health and its partners, its subcontractors and its applicable third parties.

This Privacy Notice sets our standards towards the access and use of any personal data, or any other information provided from you or any other sources to us.

Depending on the services we provide, we may collect the following:

1. Customer Information:
   • Emails
   • Names
   • Phone numbers
   • Organization
2. Employee Information
3. Job application information including CVs and references
4. Supplier Information
5. Visit information for accessing our premises

Upon engaging RX Health for the provision of our services, you will be required to directly provide us, data pursuant, with a contract to which you as a data subject are party to, in order for Us to perform our contractual obligation to you. We also collect the information you provide to us and the content of messages you send us, such as the query information you provide, or the questions or information you provide for through our contact page.

Specifically, We may use your data for the following purposes:

1. Supplying Our products and/or services to you (please note that We require your personal data in order to enter into a contract with you and perform our obligations under the contract thereafter).
2. Personalising and tailoring Our products and/or services for you.
3. Replying to emails from you.
4. Supplying you with emails that you have opted into (you may unsubscribe or opt-out at any time by clicking the unsubscribe link at the bottom of the email.
5. For employment purposes

With your permission and/or where we are permitted by law, We may also use your data for marketing purposes which may include contacting you by email with information, news and offers on our products and/or services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that We fully protect your rights and comply with Our obligations under the Data Protection Act and Regulations.

You have the right to withdraw your consent from Us using your personal data at any time, and to request that We delete it. We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected.

We may use your personal data for the following purposes:

• Performing our contractual obligation:
• Assessing your suitability for potential employment or other contractual engagement.
• Submission of documents to our clients including expressions of interest, capabilitystatements and tenders; and
• Compliance with all relevant laws, court/tribunal orders or enforcement related activities

Information about our clients is an important part of our business and we address sharing of your data as such. We may disclose Personal Information that we collect from you for the purpose(s) that itwas collected. We may disclose the Personal Information for other purposes where we have received your consent to do so or are required to do so by law.

Examples of where we may disclose your information include, but are not limited to:

• To comply with applicable laws or respond to valid legal procedures, RX Health may disclose your personal data to law enforcement or other government agencies.
• If RX Health is involved in a restructuring, merger & acquisition, or a bankruptcy or liquidation lawsuit in a given jurisdiction, your personal data may be disclosed in connectionwith the transaction.
• To execute a contract in the provision of our service, when we believe disclosure is necessaryor appropriate to prevent physical harm or financial loss of our clients, or when it is in connection with an investigation of suspected or actual illegal activity.

We will take reasonable steps to ensure that the Personal Information we use or disclose is accurate,up to date, complete and relevant to the purpose of the use or disclosure.

It is your responsibility to ensure that all personal data submitted to RX Health is correct. RX Health is dedicated to maintaining the accuracy and completeness of personal data andkeeping the data up to date.

To the extent required by applicable law, you have the below listed rights:

1. The right to be informed about Our collection and use of personal data.
2. The right of access to the personal data We hold about you.
3. The right to rectification if any personal data We hold about you is inaccurate or incomplete.
4. The right to erasure– i.e., the right to ask Us to delete any personal data We hold about you
5. The right to restrict (i.e., prevent) the processing of your personal data.
6. The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation).
7. The right to object to Us using your personal data for particular purposes; and
8. Rights with respect to automated decision making and profiling.

To exercise these rights, you may contact RX Health directly through the official contacts provided for the organization.

We will retain your personal information for no longer than is necessary for the purposes for which it was received, unless otherwise extending the retention period is required or permitted by law. We maintain a detailed retention schedule for Personal Information which is informed by the following principles:

1. In the first instance, Personal Information will be retained as long as required by relevant law (e.g. to ensure compliance with tax requirements); 
2. If a relevant law no longer requires us to maintain Personal Information (or that period has elapsed), the Personal Information may then still be retained if required by any relevant contractual agreement or arrangement; and 
3. For Personal Information to which a relevant law or contractual agreement or arrangement does not apply, we will retain the Personal Information for as long as is required to manage our operations and/or relationship with you plus a reasonable period afterwards.

Our website, services and products are primarily intended for adults. For special cases such as our Corporate Social Responsibility activities, information regarding persons under the age of 18 will onlybe processed with the explicit consent of the child's parents or guardians.

RX Health reserves the right to update or change this Policy at any time. We will release the latest Privacy Policy on our website and appropriate channels for any changes. If major changes are made to the Privacy Policy, we may notify you through different channels, for example, posting a notice on our website or sending you a direct notification.