Skip to content
Sahlan Home Care logo

Privacy Policy

Last updated: 24 September 2026

⚠ DRAFT – REVIEW REQUIRED

This is a placeholder policy written with Kenya’s Data Protection Act, 2019 in mind. It must be reviewed and completed by Sahlan Home Care (ideally with a lawyer or data protection professional) before the website goes live. Text in [square brackets] needs your input.

1. Who we are

Sahlan Home Care ("we", "us") provides home healthcare services in Nairobi, Kenya. We are the data controller for the personal data described in this policy. Address: Park Medical Centre (PMC), 5th Floor, 3rd Parklands Avenue, Parklands, Nairobi. Email:sahlanhomecare@gmail.com. Phone: +254 757 717 551.

[Registration with the Office of the Data Protection Commissioner (ODPC): registration number XXXX.] [Data Protection Officer: name and contact, if appointed.]

2. What information we collect

  • Contact details: your name, phone number, email address and home location/address.
  • Patient details: the patient’s name and age, if different from the person booking.
  • Health information (sensitive personal data): the service you book and any notes you share about a medical condition, as well as clinical records created while providing care.
  • Booking details: preferred date and time, booking reference, and how you found our website (for example the link or website that sent you, or what you told us).
  • Messages you send us through our contact form, WhatsApp, phone or email.

We do not use cookies, analytics or advertising trackers on this website. To understand how people find us, your browser remembers which link or website brought you here (for example Instagram or Google). This stays on your device and is only sent to us together with a booking or message you choose to send. [If this changes, update this section and add a cookie notice.]

3. Why we use your information (purpose and lawful basis)

  • To arrange and provide the healthcare service you request (performance of a contract and your consent).
  • To contact you to confirm bookings, assign a caregiver and follow up on care.
  • To process payments and keep financial records (legal obligation).
  • To meet our legal and regulatory duties as a healthcare provider.

We process health information only with your explicit consent, given when you tick the consent box on our booking form, or where otherwise permitted by the Data Protection Act, 2019. You may withdraw your consent at any time, but this will not affect processing already carried out and we may be unable to continue providing care.

4. Who we share it with

We share your information only when necessary, with:

  • the nurse, doctor, caregiver, therapist or lab technician assigned to your care;
  • partner laboratories and imaging providers, for tests and scans;
  • service providers that help us run this website and bookings, such as our form email service (Web3Forms), Google (Google Sheets, where we keep a list of bookings), website host (Netlify) and WhatsApp (Meta). Some of these providers may store data outside Kenya; we rely on appropriate safeguards as required by the Act;
  • authorities, where required by law.

We never sell your personal data.

5. How long we keep it

We keep booking and health records only as long as needed for the purposes above and to meet legal requirements for medical records. [Specify retention periods, e.g. booking enquiries that do not proceed: X months; clinical records: X years.]

6. How we protect it

We use appropriate technical and organisational measures to protect your data, including limiting access to staff who need it, confidentiality obligations for all caregivers, and secure systems. [Describe your measures.]

7. Your rights

Under the Data Protection Act, 2019 you have the right to:

  • be informed of how your data is used;
  • access your personal data;
  • object to processing;
  • correct false or misleading data;
  • have data deleted, where applicable;
  • data portability, where applicable;
  • withdraw consent at any time.

To use any of these rights, contact us at sahlanhomecare@gmail.com or +254 757 717 551. If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

8. Children

When we provide care to a child (for example, newborn care), we process the child’s data with the consent of a parent or guardian.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.