Privacy notice
Last updated October 2026
Draft pending legal review
This document is a working draft and has not yet been reviewed by a lawyer. It may change before the service is generally available.
This notice explains how InnovaStark Technologies, the provider of ClinisLab (“we”), handles personal data, in line with Ghana's Data Protection Act, 2012 (Act 843). It covers two different situations, because our role is different in each.
1. This website and demo requests
For the information you give us on this website, we are the data controller.
What we collect
- Demo requests: your name, role, email, phone number (and whether it is on WhatsApp), facility name and type, region and town, approximate daily volume, preferred date and time, and your message.
- Technical data needed to protect the form from abuse: your IP address, browser type and the time of the request.
Why and on what basis
- To arrange and hold the demo you asked for, and to follow up about it, with your consent given on the form.
- To keep the service secure and prevent spam, which is our legitimate interest.
We do not sell your details, and we do not use them for advertising by third parties.
How long we keep it
Demo request details are kept for up to 24 months after our last contact with you, unless you become a customer or ask us to delete them sooner.
Cookies
This website does not use advertising or analytics cookies. If bot protection is switched on for the booking form, Cloudflare Turnstile may set a strictly necessary cookie to tell people and bots apart.
2. Patient and lab data inside the service
When a laboratory uses ClinisLab, the laboratory is the data controller for its patients' information and we act as its data processor. We process that data only to provide the service, under a written data processing agreement with the laboratory, and we do not use it for any other purpose. Patients who want to exercise their rights over their test records should contact the laboratory that holds them; we will help the laboratory respond.
3. Who we share data with
We use carefully chosen service providers (sub-processors), for example for hosting, email and SMS delivery, under contracts that require them to protect the data. Where data is stored or processed outside Ghana, we take the steps required by the Act to keep it protected. A list of sub-processors will be published before general availability.
4. Security
We protect personal data with technical and organisational measures appropriate to health information, described on our security page.
5. Your rights
You may ask to see the personal data we hold about you, to correct it, or to have it deleted, and you may withdraw consent or object to processing at any time. Contact us at info@clinislab.com. You also have the right to complain to the Data Protection Commission of Ghana.
6. Changes
We will update this notice when our practices change and show the date of the latest version at the top.