Note that this Policy does not apply to the collection, use, retention, disposal, destruction, and protection of Personal Data by Healthcare Providers. Healthcare Providers are subject to privacy legislation and professional requirements that govern their management of Personal Data including information they collect, use and retain in the course of providing the Healthcare Services through the MDLink Platform. Please feel free to ask any Healthcare Provider to whom you are referred if you have questions about how he or she will treat your Personal Data.
This Policy explains our practices with regard to Personal Data collected by MDLink for its own business purposes. We may collect the following types of Personal Data:
The above is a non-exhaustive list which is reflective of the varied nature of the Personal Data processed as part of providing the Telehealth Services.
MDLink collects and uses Personal Data only as necessary to provide our Telehealth Services, including but not limited to developing, assessing, and optimizing our MDLink Platform functionality, the Telehealth Services and user experience. We only collect Personal Data if non-identifying information will not suffice. We minimize our collection and use of Personal Data to what is needed for these purposes. For example, we do not record the audio or video portions of interactions between users and Healthcare Providers through the MDLink Platform.
We collect and use your Personal Data to register you, create your User Account, authenticate you when you log in and personalize your experience while using the MDLink Platform.
We use Personal Data that you enter, or upload, or which is created as part of an interaction with a Healthcare Provider to make it available to you when you access your User Account. You may enter the name and contact information for your emergency contact.
We may use Personal Data for loss prevention and anti-fraud purposes, and to comply with regulatory and legal requirements.
We may use Personal Data to help us create, develop, operate, deliver, support and improve the MDLink Platform, its content and advertising provided to you through it (by MDLink and authorized third parties) unless you have decided not to receive such advertising.
To request the Telehealth Services, you select any applicable symptoms relevant to your request. You may also specify whether you are seeking to renew a prescription or obtain a sick note. We facilitate your disclosure to the Healthcare Provider of that information, along with age and gender to determine whether your request is eligible. We do not identify you, or, if applicable, a minor for whom you are seeking the Telehealth Services. Once the Healthcare Provider confirms and accepts that your request is eligible, we identify the Healthcare Provider to you. The MDLink Platform presents to the Healthcare Provider the information you provided in your consultation request, your name and, if applicable, the name of the minor for whom you are seeking the consultation.
We use the Personal Data that you enter to provide you with the Telehealth Services that you request us to perform on your behalf, e.g., securely faxing/e-mailing your prescription to your chosen pharmacy.
We use your Personal Data to text or email you or to notify you about Telehealth Services that you request. For example, we notify you about the status of your consultations and other requests, such as prescription orders.
We may collect location data through the use of GPS technology and your IP address where applicable to Telehealth Services you have requested, for example, ensuring you are connected to a Healthcare Provider or pharmacy that is licensed and authorized to provide such services in the jurisdiction where you are located. We also use your IP address for security purposes, for example, presenting you with information about your account activity in your account settings.
Healthcare Providers are responsible for their collection, use, disclosure, retention, destruction and protection of Personal Data. As a result, the following description is an overview only of the use generally made of Personal Data for the purpose of providing the Healthcare Services through the MDLink Platform. A particular Healthcare Provider may or may not chose to collect or use Personal Data as described below in connection with a particular interaction with a user.
Healthcare Providers may collect Personal Data about you or any minor when you provide it during a telehealth consultation (e.g., verbally or in texts), by viewing the Personal Data that you have entered or uploaded to the MDLink Platform and/or by creating or compiling Personal Data in the MDLink Platform. Personal Data that will be available to Healthcare Providers includes: the details that you provide in your consultation request; information you have entered or uploaded to profiles and medical records; information created during earlier interactions through the MDLink Platform with other Healthcare Providers; the name, email address, phone number, gender, date of birth as well as the location that you provided when you registered; and your emergency contact’s name and contact information. Healthcare Providers use Personal Data to provide you with the Healthcare Services and, as with any Healthcare Provider, must comply with the privacy legislation and medical record-keeping obligations to which they are subject. Healthcare Providers may create information such as prescriptions, lab requests, sick notes and other notes about your interaction with them through the MDLink Platform. They may export or print copies of your Personal Data that they collect. Healthcare Providers may, but are not required to email or text your emergency contact if they believe that you are dealing with a medical emergency during a consultation.
Medical emergencies associated with requests for Healthcare Services.
Should you submit information about a medical issue, which is deemed an emergency by a Healthcare Provider prior to their acceptance of your request for the Healthcare Services, MDLink reserves the right to contact you at any time using any of the contact information you have provided. The sole purpose of this contact would be to inform you that a Healthcare Provider has viewed your anonymized request and has declined the request based on their belief that your symptoms may represent a medical emergency.
Updates and marketing.
If you email, fax, write to us or complete a ‘contact us’ form on the MDLink Platform, we will collect the name and contact information that you provide to us and will use it to respond to you.
Please note this list is non-exhaustive and there may be other examples where we need to share your Personal Data with other third parties in order to provide the Telehealth Services as effectively as we can.
We may need to transfer Personal Data to third-parties located in a territory outside of Jamaica for further processing in accordance with the purposes for which the Personal Data was originally collected or for purposes to which you have subsequently consented.
By accessing, registering on and using the MDLink Platform you hereby consent to the transfer of your Personal Data to a territory outside of Jamaica whenever such need may arise.
You shall not hold us liable for the manner in which your Personal Data is processed and/or used by any third-parties which are situated outside Jamaica.
Unless we otherwise give you notice, we will retain your Personal Data on the MDLink Platform on your behalf until you or we terminate your User Account. On termination, we will delete the Personal Data associated with your User Account, except Personal Data that a Healthcare Provider advises us he or she requires in connection with providing the Healthcare Services to you. In such circumstances, MDLink will destroy the Personal Data when the Healthcare Provider has obtained a copy or terminates his/her User Account with MDLink.
You can access your Personal Data to check that it is accurate, complete, and up to date by logging in to your User Account. Once you have logged in to your User Account, you may update and edit any of your Personal Data except Personal Data a Healthcare Provider has viewed or generated during the provision of the Healthcare Services. . You will be required to contact the Healthcare Provider who provided the Healthcare Services to access or request the correction of Personal Data in their notes on the MDLink Platform.
MDLink will not be held responsible for any loss, damage or claim that may arise due to any inaccurate, incomplete, or otherwise deficient Personal Data which you have provided to us or any Healthcare Provider via the MDLink Platform.
The security of your Personal Data is taken very seriously by MDLink. We store your Personal Data in electronic format within the U.S.A., using computer systems with restricted access and housed in facilities using physical security measures. MDLink has also put in place appropriate technical and organizational safeguards to protect Personal Data against theft, loss and unauthorized access, use and disclosure. MDLink’s partners, employees, consultants, agents, independent contractors and data processors (i.e. those who process your Personal Data on our behalf, for the purposes listed above), who have access to, and are associated with the processing of your Personal Data are obligated to protect your Personal Data by adhering to our policies, practices and applicable laws.
MDLink also encourages its users to play their part in protecting their privacy and the confidentiality of their Personal Data by creating a strong password for their User Account and mobile device. Users are also encouraged to log out of their MDLink User Accounts upon completion of a consultation.
MDLink, however, does not warrant or make any representations that your Personal Data may not be accessed, used, disclosed, altered, or destroyed by breach of such safeguards. MDLink will immediately notify any user whose Personal Data has been affected by a security breach and will maintain an incident response policy that includes notifications consistent with applicable law.
Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process your Personal Data.
If you would like to exercise any of the abovementioned rights, you may contact us at email@example.com.
This Policy shall be governed by and construed in accordance with the laws of Jamaica.
This Policy was last updated on May 05, 2021. We will update this Policy from time to time to reflect any changes to our use of your Personal Data. We may also update this Policy as required to comply with changes in applicable law or regulatory requirements. Our obligations will be determined having regards to the policy as amended from time to time and not the policy at the time the Personal Data was collected by us. We will post notifications of any changes to this Policy on our website and we encourage you to check our website periodically so as to become aware of any changes to this Policy.
If you have any questions, concerns or suggestions about our privacy practices, please contact us at firstname.lastname@example.org.
Founded in 2017 with the mission to improve and reinvent access to healthcare across the Caribbean. MDLink is an innovative medical service provider offering modern services that allows patients to conveniently connect with the best doctors in the region.