I‑Kare Medical Privacy Policy

Effective Date: June 1st, 2024
Last Updated: December 11th, 2025

1. Introduction

I‑Kare Medical (“we,” “us,” “our”, “I‑Kare”) is committed to protecting the privacy of our patients, website visitors, and all individuals whose personal data we handle. This Privacy Policy explains how we collect, use, share, store, and protect your personal and sensitive data in compliance with Jamaica’s Data Protection Act, 2020 (“DPA”).

This policy applies to all personal information collected in connection with:

  • Our medical and surgical services.

  • Diagnostic, gynecological, and investigative procedures.

  • Telemedicine consults and home visit services.

  • Appointment bookings and patient communications.

  • Visits to our websites and online platforms.

2. Who We Are

I‑Kare Medical operates medical facilities in Kingston, Jamaica, providing holistic, quality healthcare through general consultations, specialized services (such as minor surgeries and gynecological care), mobile and home-based services, investigative testing, and emerging services like telemedicine and dialysis‑related care. 

We act as the data controller — meaning we determine the purposes and means of processing your personal data.

3. Personal and Sensitive Data We Collect

We may collect and process the following types of personal data:

a) Identity & Contact Information

  • Full name, address, telephone number, email address, date of birth, emergency contact.

  • Information you submit through patient registrations, appointment forms, or online bookings.

b) Health & Medical Information (Sensitive Personal Data)

  • Medical history and examination results.

  • Test results from rapid testing, investigative diagnostics, or other procedures.

  • Current and previous treatment plans.

  • Notes from consultations and surgical histories.

  • Information shared during counseling or health talks.

This category is highly sensitive and receives additional legal protection under the DPA.

c) Administrative & Operational Data

  • Appointment bookings, cancellations, and patient scheduling preferences.

  • Insurance details (when applicable).

  • Billing or account information.

d) Online & Technical Data

  • IP addresses, browser type, cookies, and analytics from visits to our websites or online booking platforms.

4. How We Collect Your Personal Data

We collect data directly from you when you:

  • Complete patient intake and consent forms in‑person or online.

  • Book medical appointments or use telemedicine services through our website.

  • Attend consultations or medical procedures at our facilities.

  • Communicate with us by phone, email, or other messaging platforms.

  • Submit personal data through interactive areas of our websites (such as appointment booking forms). 

5. Purposes for Processing Your Data

We process personal and sensitive data for the following purposes:

  • Provision of Healthcare: To deliver safe, responsible, and effective medical care.

  • Clinical Administration: Appointment scheduling, follow‑ups, billing operations.

  • Patient Communication: Notifications, reminders, laboratory results, telemedicine consult coordination.

  • Public Health Compliance: Reporting, record keeping, and compliance with regulatory obligations.

  • Quality Improvement: Feedback collection and service enhancement.

  • Website and Digital Services: To support web functionalities and secure telemedicine interactions.

Under the DPA, processing of personal data must be lawful and fair. For sensitive health data, we will obtain explicit consent where required or rely on permitted legal grounds for processing in the interests of patient care.

6. Legal Basis for Processing

We rely on one or more of the following lawful bases to process your data:

  • Consent: Where you provide clear affirmative permission (e.g., for telemedicine).

  • Contractual Necessity: To fulfill obligations related to the provision of medical services.

  • Legal Compliance: To comply with Jamaican health and safety regulations.

  • Vital Interests: To protect your health or the health of others.

  • Legitimate Interests: For clinical operations, admin tasks, and practice improvement.

7. Sharing and Disclosure of Personal Data

We may share necessary personal and healthcare data with:

  • Authorized medical professionals and staff within I‑Kare.

  • Third‑party service providers supporting operations (IT, billing, telemedicine platforms) under appropriate confidentiality and security agreements.

  • Regulatory or government authorities when required by law.

We do not sell, rent, or lease personal data to third parties for marketing or unrelated purposes.

8. International Data Transfers

Should we transfer personal data outside of Jamaica, we will ensure that appropriate safeguards are in place, such as contractual protections consistent with the DPA.

9. Data Retention

We retain personal and medical records only for as long as necessary to:

  • Provide ongoing care and treatment.

  • Comply with medical record retention requirements.

  • Meet legal and regulatory obligations.

When data is no longer necessary, it is securely destroyed.

10. Security Measures

We have implemented technical, administrative, and physical safeguards to protect against unauthorized access, unlawful processing, and accidental loss of personal data. These include:

  • Encryption of data in transit and at rest where applicable.

  • Access controls and audit logging for internal staff.

  • Secure backup and recovery procedures.

11. Your Rights Under the DPA

You may have the following rights with respect to your personal data:

  • Access: Request a copy of personal data we hold about you.

  • Correction: Request correction of inaccurate or incomplete information.

  • Deletion: Request deletion of data where legally appropriate.

  • Object/Restrict: Object to processing or request restrictions in certain circumstances.

  • Withdrawal of Consent: Withdraw your consent at any time.

To exercise these rights, please contact us using the details below.

12. Data Breach Notification

In the event of a security breach affecting personal data, we will notify affected individuals and the Office of the Information Commissioner in accordance with our legal obligations.

13. Contact Us

For privacy‑related questions, or to exercise your data protection rights:

I‑Kare Medical
Shop #5, Max Centre, 139 Maxfield Avenue, Kingston 10, Jamaica
Phone: +1 876‑929‑7741 / +1 876‑671‑5857
Email: ikaremedical@i‑karemedical.org