Privacy Policy

This Privacy Policy explains how Amiafam Limited ("Amiafam", "we", "us") handles personal data collected through this website and when you contact us about our Medical Scheme, Healthcare & Hygiene Consumables, Digital Wellness programmes or partnerships.

Amiafam is a company based in Kenya and is the data controller for the personal data described here. We process personal data in accordance with the Data Protection Act, 2019 of Kenya and its regulations.

When you register for the Medical Scheme

First and last name, email address, phone number, national ID number, gender, age and a password for your account. Your password is stored in encrypted (hashed) form and is never visible to our staff.

When you send an enquiry

Your full name, organisation or institution (optional), phone number, email address, the area you are interested in, and anything you include in your message.

When you contact us directly

Information you share with us by phone, WhatsApp or email.

Information we do not collect

We do not use advertising or analytics trackers on this website. We do not take payments on this website: Medical Scheme contributions are paid through M-Pesa directly to the insurer.

We use personal data only for the purposes it was collected for:

• to create your Medical Scheme account and help you enrol and activate cover;
• to respond to enquiries, prepare quotations and follow up on your request;
• to arrange and deliver Digital Wellness programmes and partnerships you ask about;
• to keep our website and records secure and prevent fraud or misuse;
• to meet our legal and regulatory obligations.

We rely on your consent, on steps needed to enter into or perform an agreement with you, on our legitimate interests in running our business, and on legal obligations, as permitted by the Data Protection Act, 2019. We do not sell your personal data, and we will not send you marketing messages without your consent.

We share personal data only where needed:

• Insurance underwriter and healthcare partners: registration details needed to set up and administer your medical cover.
• Service providers: companies that host our website and database and deliver our email, acting on our instructions and bound to protect your data.
• Authorities: where the law requires it, or to protect the rights, safety or property of our members, staff or the public.

Some of our service providers may store or process data outside Kenya. Where this happens we take steps to make sure your data receives appropriate protection, as required by the Data Protection Act, 2019.

We keep personal data only for as long as needed for the purpose it was collected for, including any period required by law, accounting or insurance regulations. When it is no longer needed, we delete or anonymise it.

We use technical and organisational measures to protect personal data, including encrypted connections, encrypted password storage and access controls that limit registration records to authorised Amiafam staff. No system is completely secure, so please keep your account password private and let us know straight away if you think it has been compromised.

Under the Data Protection Act, 2019 you have the right to:

• be informed of how your personal data is used;
• access the personal data we hold about you;
• object to the processing of all or part of your personal data;
• have inaccurate or misleading data corrected;
• have false or misleading data deleted;
• withdraw consent where we rely on it, and ask for your data in a portable format where applicable.

To use any of these rights, email hello@amiafamlimited.com. We may need to confirm your identity first. If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner (ODPC) of Kenya.

This website is not intended for children to submit personal data. Our Digital Wellness programmes are arranged with schools, parents and guardians, and any information about learners is handled under the arrangements agreed with the school or guardian.

Visitors to our public pages do not receive tracking or advertising cookies. See our Cookie Policy for details.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top. Please also read our Terms & Conditions.