1. Introduction

Murapi MedHub ("we", "our", or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our cloud-based medical practice management platform ("Platform") at murapi.co.zw.

By accessing or using the Platform, you agree to the collection and use of information in accordance with this policy. This policy applies to all users, including practice administrators, healthcare practitioners, receptionists, billing staff, and any other authorised users.

2. Information We Collect

2.1 Account and Practice Information

When you register for Murapi MedHub, we collect:

Practice name, address, city, and country
Contact email address and phone number
Subscription plan and billing information
Staff names, email addresses, and assigned roles

2.2 Patient Health Information

As a healthcare management platform, we process patient health information on behalf of your practice. This includes:

Patient demographics (name, date of birth, gender, contact details)
Medical history, diagnoses, prescriptions, and treatment plans
Appointment records and consultation notes
Billing records, invoices, and payment history
Medical aid membership details and claim records

Your practice is the data controller for patient health information. Murapi MedHub acts as a data processor, processing this information solely on your instructions and in accordance with this policy.

2.3 Usage and Technical Information

We automatically collect certain technical information when you use the Platform:

IP address, browser type, and device information
Pages visited, features used, and time spent on the Platform
Error logs and performance data
Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Platform and its features
Process transactions and send related information, including invoices and receipts
Send appointment reminders, notifications, and administrative messages
Respond to comments, questions, and requests for customer support
Monitor and analyse usage patterns to improve user experience
Detect, investigate, and prevent fraudulent transactions and other illegal activities
Comply with legal obligations under Zimbabwean law

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

Service Providers: We engage trusted third-party companies to perform services on our behalf, including cloud hosting, email delivery (Resend), SMS services (Gikko), and payment processing (PayNow). These providers are contractually bound to protect your information.
Legal Requirements: We may disclose information if required to do so by law, court order, or governmental authority in Zimbabwe or any other applicable jurisdiction.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
With Your Consent: We may share information with third parties when you have given us explicit consent to do so.

5. Data Security

We implement industry-standard security measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for all data transmitted to and from the Platform
Encryption of sensitive data at rest
Multi-tenant data isolation ensuring each practice's data is strictly segregated
Role-based access control limiting data access to authorised personnel only
Immutable audit logs recording all data access and modifications
Regular security assessments and vulnerability testing

While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Patient health records are retained for a minimum of 10 years from the date of last treatment, in accordance with Zimbabwean healthcare regulations. You may request deletion of your account data, subject to our legal obligations to retain certain records.

7. Your Rights

Subject to applicable Zimbabwean law, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your personal information (subject to legal retention requirements)
Object to or restrict the processing of your information
Request a portable copy of your data
Withdraw consent where processing is based on consent

To exercise these rights, please contact us at [email protected].

8. Cookies

We use cookies and similar tracking technologies to enhance your experience on the Platform. Please see our Cookie Policy for detailed information about the cookies we use and how to manage them.

9. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

10. Children's Privacy

The Platform is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Platform after any changes constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]
General enquiries: [email protected]
Website: murapi.co.zw