Your privacy and the security of your health data are our absolute priorities. Read how we protect your personal and clinical records under the Tanzania Personal Data Protection Act, 2022.
At Tabibu Health Services, our platform is fully compliant with the Tanzania Personal Data Protection Act (PDPA), 2022 (Act No. 11 of 2022). Under the supervision of the Tanzania Personal Data Protection Commission (PDPC), we process, store, and safeguard your clinical information in accordance with national regulations.
We collect and process only the minimum personal data required to manage your healthcare appointments and provide clinic discovery services:
Full name, normalized telephone number, email address, secure cryptographically hashed credentials, and optional insurance registration provider details.
Healthcare centers, clinics, or pharmacies searched, appointment history, preferred clinicians, dates/times, and optional clinic booking triage notes.
We utilize industry-leading security controls and defense-in-depth infrastructure standards to ensure your sensitive records are never intercepted or compromised:
All traffic between your browser and our platform is encrypted using modern TLS 1.3 and TLS 1.2 protocols. We strictly enforce HTTP Secure (HTTPS) and utilize **HSTS (HTTP Strict Transport Security)** to eliminate protocol downgrade exploits.
Patient credentials, personal identity variables, and clinical appointment histories are stored securely in distributed clusters protected by robust **AES-256 bit encryption** at rest.
Database storage and application core microservices are hosted inside isolated Virtual Private Clouds (VPC) protected by firewalls and access lists. Databases have absolutely no direct exposure to the public internet.
User logins are authenticated using secure, cryptographically signed JSON Web Tokens (JWT). All stateful portals enforce strict anti-CSRF (Cross-Site Request Forgery) protection and rate limiting to prevent unauthorized access.
You have the right to request a complete, readable export of all patient profile and booking records registered on the platform.
You can modify or update any inaccurate or incomplete details in your portal profile at any time.
You may request the deletion of your account and credentials, subject to statutory medical record archiving laws.
You have the explicit right to report any suspected privacy violation directly to the Personal Data Protection Commission (PDPC) of Tanzania.
Our Data Protection Officer is here to help you understand your rights.
Contact Privacy Team