Privacy Policy

Doc Chap Ghana provides digital tools that can support appointment booking, healthcare-provider discovery, clinic operations, messaging, payments and other healthcare-related services. This policy applies to information processed through those services.

Where we process health information, we apply additional safeguards appropriate to the sensitivity of that information.

Data controller: Mercury Global, operator of Doc Chap Ghana.

Email: contact@doc-chap.com

Where a clinic or healthcare professional determines the purpose and means of processing patient information in its own service, that organisation may also act as an independent controller for its relevant processing.

• Account information: name, email address, phone number, password hash and account role.
• Profile and professional information: speciality, clinic details, availability, professional documentation and public profile content where applicable.
• Appointment information: dates, times, appointment type, status and related service details.
• Health information: only where a user or authorised healthcare organisation uses healthcare-record features.
• Payment information: amounts, status, method and provider references; full payment-card numbers are not stored by Doc Chap Ghana.
• Technical information: device, browser, IP address, logs, security events, preferences and cookie identifiers.

• Information you give us through forms, account registration, uploads, support requests or appointments.
• Information submitted by authorised healthcare professionals or clinics in connection with their services.
• Information from payment, messaging, hosting or other technical providers where necessary to operate the service.
• Technical data generated by your device, browser or use of the platform.

We process information to provide and secure the service, create and manage accounts, arrange appointments, respond to requests, operate payments, maintain records where relevant, improve reliability, prevent fraud and meet legal obligations.

Processing is carried out in accordance with Ghana’s Data Protection Act, 2012 (Act 843), including where processing is necessary for a service you request, a legal obligation, legitimate operational and security interests, or your consent where consent is required.

We may share information only when necessary with authorised healthcare professionals and clinics, technical hosting providers, communication providers, payment providers, security and support providers, or authorities where required by law.

Each recipient is expected to access only the information needed for its authorised purpose.

Some technical providers may process information outside Ghana. Where this occurs, we take reasonable steps to use appropriate safeguards and providers capable of protecting personal data in line with applicable requirements.

We retain personal information only for as long as needed for the purposes described in this policy, including account management, healthcare operations where applicable, security, dispute resolution and legal obligations. Retention periods can differ depending on the nature of the data and the service used.

We use measures designed to protect information from unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, authentication, encryption in transit, audit logging, backups and security monitoring.

No internet service can guarantee absolute security. Users should protect their passwords, use trusted devices and report suspected unauthorised access promptly.

Subject to applicable law, you may have rights to be informed, access personal information, request correction of inaccurate information, object to certain processing, withdraw consent where processing depends on consent, and complain about unlawful processing.

To submit a request, email contact@doc-chap.com. You may also raise a concern with Ghana’s Data Protection Commission.

Where services involve children or minors, the relevant parent, guardian, clinic or healthcare professional is responsible for ensuring that any required authority, consent and safeguarding obligations are met.

We may update this policy as the platform, applicable law or our practices change. The latest version will be posted on this page with an updated date.

See also our Legal Notice and Cookie Policy.