Data Protection

Livia Health complies with the Data Protection Act, 2019 and is registered with the Office of the Data Protection Commissioner (ODPC) as a data controller.

Our data protection principles

• Lawful processing. We only collect and process personal data with a valid legal basis, such as consent, contractual necessity or a legal obligation under Kenyan law.
• Purpose limitation. Data is collected for specified, explicit and legitimate purposes and is not processed in ways incompatible with those purposes.
• Data minimisation. We collect only data that is adequate, relevant and limited to what is needed to deliver healthcare services.
• Accuracy. We take reasonable steps to keep personal data accurate and up to date.
• Storage limitation. Personal data is kept in identifiable form no longer than necessary.
• Security and confidentiality. We use appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction.

Your rights under the Act

• Right to be informed about data collection
• Right to access your personal data
• Right to correct inaccurate data
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with the ODPC

For data protection enquiries, contact our Data Protection Officer at dpo@liviaapp.com.