Privacy Policy

At CNBA Healthcare, we are committed to protecting your privacy and ensuring the security of your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our facility, use our services, or interact with our website.

By using our services or providing us with your personal information, you consent to the practices described in this Privacy Policy. We encourage you to read this policy carefully and contact us if you have any questions.

We collect various types of information to provide you with the best possible healthcare services:

Personal Information:

• Name, address, phone number, and email address
• Date of birth and gender
• Emergency contact information
• Insurance information and payment details
• Employment information when relevant to care

Medical Information:

• Medical history and current conditions
• Treatment records and test results
• Prescription and medication information
• Allergies and adverse reactions
• Appointment and consultation records

Technical Information:

• IP address and browser information when using our website
• Device information and location data when applicable
• Usage patterns and preferences on our digital platforms

We use your information for the following purposes:

• Healthcare Services: Providing medical care, treatment planning, and health management
• Communication: Appointment reminders, test results, and important health information
• Administrative: Billing, insurance claims, and healthcare operations
• Legal Compliance: Meeting regulatory requirements and legal obligations
• Quality Improvement: Enhancing our services and patient care standards
• Emergency Situations: Providing critical medical information to healthcare providers

We may share your information only in the following circumstances:

• Healthcare Team: With doctors, nurses, and medical staff involved in your care
• Insurance Companies: For billing and claim processing purposes
• Legal Requirements: When required by law, court orders, or regulatory agencies
• Emergency Situations: To protect your health and safety or that of others
• Business Associates: With trusted third parties who assist in our operations under strict confidentiality agreements
• Research: For medical research purposes only with your explicit consent and after de-identification

We never sell your personal or medical information to third parties for commercial purposes.

By accepting this policy, you acknowledge and consent to receive notifications and promotional communications from us through various channels, including but not limited to email, mobile push notifications, SMS, RCS (Rich Communication Services), WhatsApp, or any other digital communication platforms.

If you prefer not to receive such updates or marketing communications, you may opt out by contacting us info@cnba.xyz

We implement comprehensive security measures to protect your information:

• Physical Security: Secure facilities with restricted access and surveillance systems
• Technical Security: Encryption, firewalls, and secure servers for digital information
• Administrative Security: Staff training, access controls, and confidentiality agreements
• Regular Audits: Periodic security assessments and updates to our systems
• Incident Response: Procedures for addressing any potential security breaches

You have the following rights regarding your personal information:

• Access: Request copies of your medical records and personal information
• Correction: Request corrections to inaccurate or incomplete information
• Restriction: Request limitations on how we use or disclose your information
• Portability: Request transfer of your medical records to another healthcare provider
• Communication: Choose how and where we contact you
• Complaints: File complaints about our privacy practices

To exercise these rights, please contact our Privacy Officer using the information provided at the bottom of this policy.

We retain your information for as long as necessary to:

• Provide ongoing healthcare services
• Meet legal and regulatory requirements
• Support legitimate business purposes
• Resolve disputes and enforce agreements

Medical records are typically retained for a minimum of 7 years after the last treatment date, or as required by applicable laws and regulations. Some information may be retained longer for research or legal purposes.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make significant changes, we will:

• Post the updated policy on our website
• Notify you through our usual communication channels
• Provide additional notice if required by law

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this policy periodically.