PRIVACY POLICY

Privacy Policy

Effective Date: 1 January 2023
Reviewed and Updated for Compliance with the Data Protection Act (2021 Revision)


1. Introduction

Doctors Express (“we”, “us” or “our”) is committed to safeguarding the personal data of our patients, scholarship applicants and website visitors. This Privacy Policy outlines how we collect, use, store and share personal information in compliance with the Cayman Islands Data Protection Act (2021 Revision) (“the Act”).

This policy applies to all personal data collected through our website https://www.doctorsexpress.ky, our operations, and interactions initiated by individuals using our services or submitting data to us.

For questions or data requests, please contact:
📧 legal@doctorsexpress.ky


2. Scope

This policy governs all personal data we process from:

  • Patients and prospective patients

  • Scholarship applicants

  • Website users and online enquirers

  • Individuals submitting forms, uploads or requests through our systems

It applies to electronic and physical records under our control.


3. What Personal Data We Collect

a. Website Visitors

  • Name, email and contact details (if provided)

  • IP address, browser type and usage metrics

  • Cookie and analytics data

b. Patients

  • Full name, contact and demographic details

  • Government-issued identification

  • Health records, diagnostic results, treatment notes

  • Insurance, billing and financial data

  • Appointment history and communications

c. Scholarship Applicants

  • Name and contact details

  • Date of birth and proof of Caymanian status

  • Educational records, GPA or degree classifications

  • Transcripts, references, and uploaded documents

  • Personal statements and responses to application questions


4. Why We Process Your Data

We collect and process personal data for the following purposes:

For Patients:

  • To provide healthcare services and manage your clinical care

  • To maintain medical records

  • To bill and liaise with insurers or payors

  • To comply with legal and regulatory requirements

For Website Visitors:

  • To respond to enquiries or contact requests

  • To monitor site usage and security

  • To improve website experience and performance

For Scholarship Applicants:

  • To evaluate eligibility and review applications

  • To verify academic status and Caymanian status

  • To contact you regarding your application

  • To notify you of future opportunities, if you have opted in


5. Legal Bases for Processing

We rely on the following lawful grounds, as defined in the Data Protection Act:

  • Consent – when you voluntarily provide information or agree to specific processing

  • Contractual necessity – to deliver medical services or evaluate scholarship applications

  • Legal obligation – to comply with health, financial, or regulatory laws

  • Legitimate interest – to operate efficiently and communicate with you effectively

Special category data, such as health information, is processed only where strictly necessary and lawful.


6. Email Communications and Electronic Data

We may communicate with you via email, including about appointments, billing matters, or scholarship applications. This may include attachments or personal data such as identification or educational documents.

While our internal systems are secured, you acknowledge that unencrypted email over the internet may not be fully secure.

By providing your email and submitting data, you consent to communication by email and accept the associated risks, unless you explicitly request a secure alternative. If you prefer encrypted or alternate communications, please contact:
📧 legal@doctorsexpress.ky


7. Data Retention

a. Patient Records

We retain patient data in accordance with medical, ethical, and legal obligations, which may include retention for the duration of the patient’s life or indefinitely depending on clinical relevance, statutory requirements or institutional policy.

We do not apply arbitrary time limits to the retention of medical records.

b. Scholarship Data

We retain scholarship application data for up to 12 months after the end of the application cycle, unless you opt in to remain on file for future opportunities.

c. General Enquiries

General enquiry or contact form data that is unrelated to clinical care or applications may be securely deleted after 90 days.

Where retention is no longer necessary, data will be securely deleted, anonymised or archived.


8. Data Security

We implement appropriate physical, technical, and procedural safeguards to protect all personal data. These include:

  • Role-based access controls

  • Secure hosting and encryption for sensitive records

  • Staff confidentiality training and IT monitoring

Despite these safeguards, no digital platform is entirely risk-free, and we cannot guarantee absolute security. By interacting with us online, you acknowledge this residual risk.


9. Data Sharing and Disclosure

We do not sell or rent your data.

We may share personal information only when necessary and lawful, including:

  • With healthcare professionals involved in your care

  • With authorised staff reviewing scholarship applications

  • With insurers and payment processors

  • With IT providers supporting our systems

  • With legal or regulatory authorities, when required

All third parties are subject to strict data protection and confidentiality requirements.


10. Children’s Data

We lawfully collect and process personal data of children when required to deliver healthcare services. This includes identifying and health-related information.

Where the patient is under 18, we require parental or guardian consent, unless the law provides otherwise (e.g. emergency treatment or Gillick competence). Children’s data is treated with heightened confidentiality and processed in full compliance with the Data Protection Act and medical standards.


11. Your Rights

You have the following rights under the Data Protection Act (2021 Revision):

  • To request access to your personal data

  • To request correction of inaccurate data

  • To request erasure or restriction of processing (where legally permissible)

  • To object to processing based on legitimate interest

  • To withdraw consent at any time

  • To lodge a complaint with the Cayman Islands Ombudsman

To exercise these rights, contact:
📧 legal@doctorsexpress.ky
We will respond within 30 calendar days, subject to legal and clinical exceptions.


12. Cookies and Website Analytics

We use cookies and tracking tools to:

  • Maintain session functionality

  • Understand visitor behaviour and improve services

  • Customise user experience

You may disable cookies in your browser at any time, though this may affect site performance.


13. Changes to This Policy

This policy may be updated periodically to reflect changes in legal requirements or operational practices. The most recent version will always be available on our website. Continued use of our services implies acceptance of any revised terms.


14. Contact Information

Doctors Express
81 Godfrey Nixon Way
P.O. Box 669
George Town, Grand Cayman
KY1-1107, Cayman Islands
📧 legal@doctorsexpress.ky

Effective Date: 1 January 2023


Introduction

At Doctors Express, accessible from https://www.doctorsexpress.ky/, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by Doctors Express and how we use it. If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

Doctors Express (“We,” “Us,” “Our“) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard your personally identifiable health information (“PIHI”). By accessing or using our services, you consent to the practices described in this policy.

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collected on the Doctors Express website. This policy is not applicable to any information collected offline or via channels other than this website.

Data We Collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

We collect personally-identifiable health information (“PIHI”) that you provide to us when using our services. This information may include but is not limited to:

  • Name
  • Contact information (address, phone number, email)
  • Date of birth
  • Medical history and records
  • Insurance information
  • Billing and payment data

How We Use Your Data

We use the information we collect in various ways, including to:

  • Provide, operate, and maintain our website.
  • Improve, personalize, and expand our website.
  • Understand and analyze how you use our website.
  • Develop new products, services, features, and functionality.
  • Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes.
  • Send you emails.
  • Find and prevent fraud.

We use your PIHI for the following purposes:

  • To provide healthcare services, diagnosis, and treatment.
  • To communicate with you regarding your healthcare.
  • To bill and process payments for services.
  • To comply with legal obligations.

Log Files

Doctors Express follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and are a part of hosting services’ analytics.

The information collected by log files include internet protocol (“IP”) addresses, browser type, Internet Service Provider (“ISP”), date and time stamp, referring/exit pages, and possibly the number of clicks.

These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.

Cookies and Web Beacons

Like any other website, Doctors Express uses ‘cookies’. These cookies are used to store information including visitors’ preferences, and the pages on the website that the visitor accessed or visited.

The information is used to optimize the users’ experience by customizing our web page content based on visitors’ browser type and/or other information.

For more general information on cookies, please read “What Are Cookies” from Cookie Consent.

Data Security

We implement reasonable security measures to protect your PIHI from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.

Data Retention

We retain your PIHI only as long as necessary to fulfill the purposes for which it was collected. After this period, your data will be securely deleted.

Disclosure of PIHI

We may share your PIHI with third parties, including:

  • Healthcare providers involved in your care.
  • Insurance companies for billing and payment.
  • Legal authorities when required by law.

Your Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact our Data Protection Officer at: legal@doctorsexpress.ky.

Children’s Information

Another priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

Doctors Express does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices. You will be notified of any significant updates.

Contact Us

For any questions, concerns, or requests related to this Privacy Policy, please contact:

Doctors Express
81 Godfrey Nixon Way
P.O. Box 669, George Town
Grand Cayman, KY1-1107
Cayman Islands
legal@doctorsexpress.ky