Privacy & Data Policy

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email, phone number, address)
• Professional information (clinic/pharmacy name, license details)
• Payment information for subscription or license purchases
• Account credentials (username, password hints)
• Technical support information

Usage and Technical Information

When you use our website or software, we automatically collect certain information, including:

• IP address, browser type, and operating system
• Website usage patterns (pages visited, time spent)
• Software installation and activation data
• Error logs and performance metrics (for improving our products)
• Cookies and similar tracking technologies

Health-Related Information

Important: HealthSysPlus is designed as an offline-first software solution. Patient data entered into DentSysPlus or DawaSys remains stored locally on your device and is NOT transmitted to our servers unless you explicitly choose to use our optional backup or synchronization features.

We do not collect, store, or access patient health information unless you voluntarily opt-in to specific features that require such data processing, and even then, the data remains under your control.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our website, software, and services
• To process transactions and send you purchase confirmations, invoices, and receipts
• To create and manage your HealthSysPlus account
• To communicate with you about updates, security alerts, and support-related information
• To respond to your inquiries and provide customer support
• To analyze usage patterns and improve our products
• To detect, prevent, and address technical issues, security incidents, or fraudulent activities
• To comply with legal obligations and enforce our terms of service

We do NOT sell your personal information to third parties for marketing purposes.

Information Sharing and Disclosure

We may share your information in the following limited circumstances:

• Service Providers: With trusted third parties who perform services on our behalf (payment processing, hosting, analytics, email delivery). These partners are contractually required to protect your data.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Consent-Based Sharing: When you explicitly consent to share specific information for a particular purpose.

We implement appropriate technical and organizational measures to ensure that any service providers we work with maintain confidentiality and security of your information.

Data Security

We take the security of your information seriously and implement reasonable safeguards to protect it:

• Industry-standard encryption for data in transit (HTTPS/TLS)
• Secure storage practices for any data we maintain on our servers
• Regular security assessments and vulnerability testing
• Access controls limiting who can view your information
• Employee training on data protection and privacy practices

Important Security Note About Our Software:

• HealthSysPlus products (DentSysPlus, DawaSys) are designed as offline-first solutions. Your primary data resides on your local device, giving you direct control over its security.
• We recommend implementing local security measures such as device encryption, strong passwords, and regular backups.
• Any optional cloud features we may offer will implement end-to-end encryption where appropriate.

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal exceptions)
• Restriction: Request limitation on how we use your information
• Portability: Receive your information in a structured, commonly used format
• Objection: Object to certain types of processing, such as direct marketing
• Withdraw Consent: Where processing is based on your consent, you have the right to withdraw it

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

We will respond to your request within a reasonable timeframe, typically within 30 days, and in accordance with applicable laws.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyze site traffic, and improve our services.

Types of Cookies We Use

• Essential Cookies: Necessary for website functionality (session management, security)
• Preference Cookies: Remember your settings (language, region)
• Analytics Cookies: Help us understand how visitors interact with our site (Google Analytics)
• Marketing Cookies: Used for relevant advertising (only with your consent)

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

We do not use cookies or tracking technologies within our desktop software applications.

International Data Transfers

HealthSysPlus is based in Uganda and serves customers internationally. Your information may be transferred to, stored, and processed in Uganda or other countries where we or our service providers operate.

By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We implement appropriate safeguards to protect your information regardless of where it is processed.

For transfers from the European Economic Area (EEA), we rely on appropriate safeguards such as standard contractual clauses or other mechanisms recognized under applicable data protection laws.

Changes to This Policy

We may update this Privacy & Data Policy from time to time to reflect changes in our practices, legal requirements, or technological developments.

When we make changes, we will:

• Update the "Last updated" date at the top of this policy
• Provide notice of significant changes through our website or by email to registered users
• In some cases, we may obtain your consent before implementing changes that materially affect how we process your information

Your continued use of our products or services after any changes to this policy constitutes your acceptance of the updated terms.

We encourage you to review this policy periodically for updates.

Contact Us

If you have questions, concerns, or requests regarding this Privacy & Data Policy or our privacy practices, please contact us:

For data protection inquiries or to exercise your privacy rights, please clearly indicate the nature of your request in your communication.