Last Updated: 01 February 2026

 

Effective: 01 February 2026

 

ONOT Healthcare Ltd. (“ONOT”, “we”, “us”, or “our”) is committed to protecting the privacy and security of your personal and medical information. As a company registered in Ghana, we operate with unwavering honesty, transparency, and accountability, ensuring that your well-being and privacy are our top priority.

 

This Policy explains how we collect, use, disclose, transfer, and secure personal data when you visit our website, create an account, book or manage services, communicate with us, or apply for jobs. It also describes your privacy rights and how to exercise them.

 

The data we collect

We collect the following information you provide directly, and through information generated from use of our services or website:

• Identity and contact: name, date of birth, nationality, postal/billing address, email, phone, emergency contact
• Service intake and coordination: health status, allergies, medications, treating facility details, preferred hospital/clinician, mobility and accessibility needs, travel/accommodation preferences, interpreter needs.
• Documents: ID/passport, referral letters, medical reports, prescriptions, travel/visa details, insurance.
• Financial and insurance data: Insurance policy details, claim authorizations, and billing information to manage financial processes.
• Payments: transaction metadata, mobile money references, billing address (we do not store full card numbers; processing is via licensed providers).
• Employment and education: CV, licenses/certifications, employment history, references, professional membership, interview notes, right-to-work checks where lawful.
• Web data and cookies: IP address, device/type, browser, pages viewed, time stamps, and cookie/SDK identifiers for essential operations, security, and analytics.

 

How we use your data

Under Ghana’s Data Protection Act, 2012 (Act 843) and Payment Systems and Services Act, 2019 (Act 987), we process personal data guided by principles including minimality, purpose specification, openness, security safeguards, quality of information, and client participation.

We use your data for:

• Service provision and coordination – creating and managing your account, service requests, arranging appointments, travel/accommodation, homecare, equipment, pharmacy logistics, and client communications. Special personal data will be processed with your explicit consent or as otherwise permitted by law.
• Payments and billing – deposits, invoices, refunds, using providers licensed or supervised by law, contracts, and compliance with financial/legal obligations.
• Recruitment – evaluating applications, verifying credentials, scheduling interviews, communicating decisions, consent; contracts.
• Safety, security and compliance – fraud prevention, incident management, audit logs, and responding to lawful requests.
• Communications and support – service updates, reminders, case management. Marketing is subject to your choices, including the right to object to direct marketing.

 

Sharing your information

We share data only as needed for the purposes above, with:

• Healthcare partners (hospitals, clinics, therapists) to schedule, coordinate, and support care, subject to confidentiality and law.
• Medical transport, hospitality and logistics providers for safe travel, lodging, or home adaptations.
• Government and diplomatic bodies such as embassies, consulates, and government agencies to manage repatriation logistics and visa requirements in compliance with international laws.
• Diagnostics, equipment and pharmacy providers to arrange at-home labs, devices, consumables, and medication support.
• Payment processors and mobile money/e-money operators licensed and regulated; ONOT is not a payment service provider.
• Insurance providers to facilitate payment solutions and guarantees of payment.
• Hospitality partners such as hotels and housing providers for medical concierge and safe housing setups.
• Recruitment service tools and background‑check vendors where lawful and required.
• Professional advisers and legal authorities to protect our rights, comply with law, or respond to lawful requests.

 

International data exchange

Due to the nature of our services, your personal and medical data may be transferred across borders (e.g., to or from Ghana) to facilitate service delivery. We will apply appropriate contractual, organizational, and technical safeguards and ensure compliance with Act 843’s requirements and the legal requirements of the respective jurisdictions for fair and lawful processing, and security.

 

Data retention

We keep personal data only as long as needed for the stated purposes (and longer where required by law, regulation, or to establish/defend legal claims), after which we securely delete or anonymize it.

 

Your rights

You have the following rights (subject to conditions and applicable exceptions):

• Access to your personal data and information about processing.
• Correction/Rectification of your personal data where inaccurate or incomplete.
• Objection to processing under certain circumstances, e.g. direct marketing.
• Erasure/Blocking where processing is unlawful or no longer necessary, and rights are violated.
• Withdrawal of consent where processing is based on consent (this does not affect prior lawful processing).

 

Security

We implement appropriate technical and organizational measures (encryption in transit and at rest where applicable, access controls, least-privilege permissions, audit logging, staff training, and vendor diligence) to protect personal data.

 

Children’s data

Where services involve minors, we obtain consent from a parent or legal guardian as required and process only what is necessary. Where legally required, we will collect additional data from the respective parents/guardians.

 

Payments

Online deposits and payments are processed by authorized and regulated providers. These providers handle your payment credentials in line with rules of the respective jurisdictions involved; ONOT receives limited payment metadata necessary for reconciliation and fraud prevention.

 

Recruitment

If you apply for a job, we process application data to assess suitability, verify credentials, and communicate with you. If unsuccessful, we may retain your data for a reasonable period for talent pool purposes (unless you object).

 

Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will post an updated version with a new effective date and, where appropriate, notify you via email or in‑app messages. Continued use of the site after changes take effect means you acknowledge the updates and agree.