Privacy and Data Protection Notice
How Nyambene Sub-County Hospital collects, uses, protects and manages personal information provided through this website.
About this notice
Last updated: September 2026
Nyambene Sub-County Hospital is committed to protecting the privacy and confidentiality of personal information provided to us through this website.
This notice explains how the Hospital collects, uses, protects and manages personal information when you visit our website or communicate with us through our online contact channels. It should be read together with our Cookie Notice, Website Disclaimer and other applicable Hospital policies.
1. Information we collect
When you use our website, we may collect personal information that you voluntarily provide, including:
- Your name
- Email address
- Telephone number
- Subject of your enquiry
- Information contained in your message
Depending on the website functions you use, limited technical information may also be processed for purposes such as website security, functionality and performance.
We seek to collect only information that is relevant and necessary for the purpose for which it is obtained. This reflects the data-protection principles under the Data Protection Act, 2019.
2. How we use your information
Information submitted through our website may be used to:
- Respond to enquiries and requests
- Provide information about Hospital services
- Respond to feedback and complaints
- Communicate with you regarding your enquiry
- Maintain the security and functionality of the website
- Improve our online services
- Comply with applicable legal and regulatory obligations
3. Please do not submit confidential medical information
The contact form is not a medical records channel
The general contact form on this website is not a patient medical-record submission system. Please do not submit medical records, diagnoses, laboratory or imaging results, detailed medical histories, patient identification documents or other confidential health information through it.
Health information is sensitive personal data under Kenyan data-protection law and requires appropriate safeguards. If you require medical assistance, please use the Hospital clinical or emergency channels, or call +254 704 320 847.
4. Lawful processing
Nyambene Sub-County Hospital processes personal data in accordance with the Constitution of Kenya, the Data Protection Act, 2019, applicable regulations and other relevant laws.
Depending on the particular processing activity, the Hospital may process personal data where this is necessary for a legal obligation, public interest or exercise of official authority, provision of services, or another lawful basis recognised under Kenyan data-protection law. Where consent is required by law, the Hospital will seek consent in an appropriate manner.
5. Sharing of personal information
Nyambene Sub-County Hospital does not sell personal information submitted through this website. Personal information may be disclosed where necessary and lawful, including:
- To authorised Hospital personnel responding to an enquiry
- To government institutions or public authorities where required or permitted by law
- To authorised service providers supporting the operation of the website
- Where disclosure is otherwise permitted or required by applicable law
Third-party service providers handling personal data on behalf of the Hospital are subject to appropriate data-protection requirements.
6. Third-party services
This website uses a small number of third-party services to provide functions such as maps, web fonts and security. These services may process technical information, such as your IP address, in accordance with their own privacy policies. The specific services in use, and the choices available to you, are set out in our Cookie Notice.
7. Cookies
Our Cookie Notice explains which cookies and similar technologies are used on this website, what they do, and how you can manage them.
8. Information security
The Hospital takes appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction. Access to information is limited to authorised persons.
No method of transmitting or storing information electronically can be guaranteed to be completely secure. The Hospital therefore continually seeks to maintain safeguards proportionate to the nature of the information processed.
9. Retention of personal information
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, or as required by applicable legal, administrative or records-management requirements. Different categories of information may therefore be retained for different periods. The Hospital maintains internal retention and disposal procedures.
10. Your rights
Subject to applicable law, you may have the right to:
- Be informed about the use of your personal data
- Request access to personal data held about you
- Request correction of inaccurate or misleading personal data
- Request deletion of personal data where applicable
- Object to certain processing
- Request restriction of processing where applicable
- Request portability of personal data where applicable
- Exercise other rights provided under Kenyan data-protection law
11. How to exercise your rights
To make a data-protection request or raise a privacy concern, contact the Data Protection Contact at Nyambene Sub-County Hospital:
Email: info@nsch.go.ke
Telephone: +254 724 265 555
Postal: P.O. Box 482-60600, Maua, Igembe South, Meru County
A note on email
Please do not send confidential medical information by ordinary email unless the Hospital specifically directs you to an approved channel.
12. Complaints
If you have a concern about how your personal information has been handled, please contact the Hospital first so the matter can be addressed through the appropriate process. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in accordance with applicable law and its complaints process.
13. Changes to this notice
This notice may be reviewed and updated periodically to reflect changes in our services, technology, legal requirements or data-processing practices.
Last updated: September 2026
Related notices
Overview
AnalyticsNone in use
AdvertisingNone in use
Form dataStored securely
IP addressesNot stored with form entries