Privacy Policy

1. Introduction

At PetherInsure, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines our principles of data protection, the rights of data subjects, how to contact us when exercising your rights, and the lawful basis for processing personal data.

1.1 Purpose: This Privacy Policy describes the policies and procedures regarding the collection, use and disclosure of your information when you use the Services offered by Pether Solutions Corporation and Laureal Corporation (referred to as “we,” “us” or “our”). It also outlines your privacy rights and how your information is protected under the law.

1.2 Scope: This Privacy Policy applies to all users of the Services worldwide, including client organizations (health insurance companies, healthcare providers, subscribing companies), their users, beneficiaries and website visitors, regardless of their location, and covers personal information collected wherever the Services are used.

1.3 Legal Framework: This Privacy Policy is developed with reference to Cameroon’s data protection regulation and other applicable laws, and is intended to reflect data protection principles that are broadly consistent with applicable data protection laws in the jurisdictions where our users are located. Where local law imposes stricter or additional requirements, we will take reasonable steps to comply with those requirements for users in that jurisdiction.

2. Principles of Data Protection

We adhere to the following principles when handling your personal data:

• Transparency: We are transparent about how we collect, use and share your personal data. Our data processing activities are clearly communicated in this policy.
• Lawfulness, Fairness and Purpose Limitation: We process your data in accordance with applicable laws and regulations. We only use your data for the purposes you have been informed about, and we do not use it in ways that are unexpected or incompatible with those purposes.
• Data Minimization: We collect and retain only the minimum amount of data necessary to fulfill our stated purposes. Unnecessary data collection is avoided.
• Accuracy: We take steps to ensure the data we collect is accurate and up to date. If you believe your data is inaccurate, you can request corrections (see “Rights of Data Subjects” below).
• Security: We implement robust technical and organizational measures to safeguard your personal data from unauthorized access, disclosure, alteration or destruction.
• Consent: When required, we obtain your explicit and informed consent before collecting and processing your data. You have the right to withdraw consent at any time.
• Data Subject Rights: We respect your rights as a data subject, including the right to access, rectify, delete or port your data. To exercise these rights, please see the section below.
• Data Transfer: If your personal data is transferred across borders, we ensure adequate safeguards are in place to protect it in accordance with relevant data protection laws.
• Accountability and Governance: We have established clear roles and responsibilities for data protection within our organization, and implemented policies and procedures to demonstrate our compliance with data protection regulations.
• Data Breach Response: We have a process in place to identify, report and mitigate data breaches. In the event of a breach, affected individuals and authorities will be informed as required by law.
• Children’s Privacy: Where the Services process data about minors, we comply with the additional regulations governing the collection and processing of data from minors.
• Privacy by Design: We integrate data protection principles into the design and development of our products, services and systems from the outset.
• Data Retention: We define specific retention periods for different categories of data and delete data that is no longer necessary for the purposes for which it was collected.
• Third-party Relationships: We ensure that third-party service providers who process personal data on our behalf adhere to the same data protection standards.
• Regular Audits and Assessments: We conduct periodic assessments of our data protection practices, including risk assessments and privacy impact assessments, to identify and mitigate potential privacy risks.
• Continuous Improvement: We are committed to continuously improving our data protection practices based on evolving laws, technology and best practices.

3. Rights of Data Subjects and How to Contact Us

As a data subject, you have certain rights regarding your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectify: If you believe that the personal data we hold about you is inaccurate or incomplete, you have the right to request corrections.
• Right to Delete: You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
• Right to Portability: You can request a copy of your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: If we are processing your data based on your consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, or if you have questions or concerns about your data privacy, please contact us:

Please provide your name, contact information and a clear description of your request or concern. We will respond to your request as soon as possible, in accordance with applicable data protection laws.

4. Lawful Basis for Processing Personal Data

We process personal data under various lawful bases, including:

• Contractual Necessity: We process your data when it is necessary to fulfill our contractual obligations with you or with your organization.
• Legitimate Interests: We process data for legitimate business interests, such as improving our services and protecting against fraud.
• Legal Obligations: We may process data to comply with legal obligations, such as tax or regulatory requirements.
• Consent: We will obtain your explicit consent when required by law.

We ensure that the processing of personal data is always in compliance with applicable laws and respects your rights and freedoms.

5. Interpretation and Definitions

5.1 Interpretation: The following definitions shall have the same meaning regardless of whether they appear in singular or plural.

5.2 Definitions

• “Account” means a unique account created for you to access the Services.
• “Affiliate” means an entity that controls, is controlled by, or is under common control with us.
• “Application” refers to any of the PetherInsure mobile applications: MyCare, MedLine and Enrollio.
• “Client Organization” means a health insurance company, healthcare provider or subscribing company that uses the Services under a contract with us.
• “Company” (referred to as “the Company,” “we,” “us” or “our”) refers to Pether Solutions Corporation, publisher of PetherInsure, together with Laureal Corporation, its technology division.
• “Cookies” are small files placed on your computer or device by a website for various purposes, including tracking your browsing history.
• “Countries of Establishment” refers to the United States, where the publisher is headquartered, and Cameroon, where its technology division is established; this Privacy Policy nevertheless applies to users of the Services wherever they are located.
• “Device” refers to any device that can access the Services, such as a computer, cellphone or digital tablet.
• “Personal Data” includes any information that relates to an identified or identifiable individual.
• “Service” refers to the Applications, the Web Platforms, the Website, or any of them.
• “Service Provider” refers to any natural or legal person who processes data on behalf of the Company.
• “Usage Data” refers to data collected automatically during the use of the Services.
• “Web Platforms” refers to the PolicyHub, MedServe and SelfService web applications.
• “Website” refers to the petherinsure.com website and any subdomains thereof.
• “You” means the individual accessing or using the Services, or the company or other legal entity on behalf of which such individual is accessing or using the Services.

6. Collecting and Using Your Personal Data

6.1 Types of Data Collected

6.1.1 Personal Data: While using the Services, we may request and collect the following personally identifiable information that can be used to contact or identify you:

• Email address
• First name and last name
• Phone number
• ID/Passport numbers
• Personal image
• Signature
• Address, Region, Postal code, City, Country

Depending on which Service you use, we may also collect:

• Health and medical information, including insurance policy and coverage details, benefits and limits, pre-authorization and reimbursement requests, services performed, medicines dispensed and medical procedures requested (applicable to MyCare, MedLine, PolicyHub, MedServe and SelfService);
• Beneficiary or dependent information, where data is provided on behalf of another individual covered under an insurance policy (applicable to MyCare, PolicyHub, SelfService and Enrollio);
• Financial and payment information, including premiums, invoices, collections, transaction history and payment method references such as mobile money (applicable to PolicyHub, SelfService and Enrollio);
• Enrollment identification data, including identity documents, photographs, fingerprints and signatures captured during enrollment when the insurer requires them, in order to identify beneficiaries (applicable to PolicyHub and Enrollio);
• Professional information about users of Client Organizations, including name, role, organization, sign-in credentials and a record of actions performed in the Web Platforms;
• Biometric data for authentication purposes, such as fingerprint or facial recognition, used solely to enable quick sign-in on MyCare and MedLine. This biometric data is processed and matched locally on your device using your device’s operating system security features; it is not collected, transmitted to, or stored on our servers.

6.1.2 Usage Data: Usage Data is collected automatically when using the Web Platforms and Applications and may include:

• Your Device’s Internet Protocol (IP) address
• Browser type and version
• Pages of the Service visited
• Time and date of your visit
• Time spent on pages
• Unique device identifiers and other diagnostic data

When you access the Services via a mobile device, we may also collect certain information automatically, including the type of mobile device used, its unique ID, its IP address, the mobile operating system, the type of mobile internet browser used, and other diagnostic data.

The Website uses no audience measurement or tracking tools. Our hosting provider may keep technical logs (IP address, date and time, page requested) to keep the Website secure and working.

6.1.3 Information Collected while Using the Applications: While using an Application and with your prior permission, we may collect the following information:

• Information regarding your location, for example to find affiliated healthcare facilities near you
• Pictures and other information from your device’s camera and photo library, for example to capture an identity document during enrollment

We use this information to provide features of the Services and to improve and customize the user experience. This information may be stored on our servers or on your device.

6.2 Cookies and Similar Technologies

On the Website: petherinsure.com uses no analytics, advertising or tracking cookies, and no web beacons. It only stores your language and theme preferences in your browser’s local storage, so they are remembered on your next visit. You can clear them at any time from your browser settings.

In the Web Platforms and Applications: these Services may use cookies or similar technologies that are strictly necessary, in particular to keep you signed in and to secure your access. You can configure your browser to refuse cookies; however, some parts of the Services may then no longer work.

Cookies may be “Persistent” or “Session” Cookies. Persistent Cookies remain on your computer or mobile device when you go offline, while Session Cookies are deleted as soon as you close your web browser.

6.3 Use of Your Personal Data: We use your Personal Data for the following purposes:

• To provide and maintain the Services, including monitoring their use.
• To manage your Account: to manage your registration as a user and give you access to the features available to registered users.
• To process coverage and claims: to identify beneficiaries, verify their coverage, process pre-authorization and reimbursement requests, and detect and prevent fraud.
• For the performance of a contract: the development, compliance and execution of the contracts concluded with you or with your organization, such as a health insurance policy, a provider agreement or a group contract.
• To contact you: by email, telephone calls, SMS or other electronic communication, such as mobile application push notifications, about the features, products or contracted services, including security updates when necessary or reasonable.
• To answer your messages: to respond to the requests you send us, including through the Website’s contact form.
• To provide you with news and general information: about services and events similar to those you have already used or inquired about, unless you have opted not to receive such information.
• For business transfers: to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, in which Personal Data held by us about users of the Services is among the assets transferred.
• For other purposes: such as data analysis, identifying usage trends, and evaluating and improving the Services and your experience.

6.4 Sharing Your Personal Data

• Between the stakeholders involved: when needed to process a request, information is shared between your insurer, the healthcare providers and medical advisers concerned, and the subscribing company for the management of its group contract, only to the extent necessary.
• With Service Providers: to operate, monitor and analyze the use of the Services and to contact you.
• For business transfers: in connection with, or during negotiations of, any merger, sale of Company assets, financing or acquisition of all or a portion of our business to another company.
• With Affiliates: in which case we will require these affiliates to honor this Privacy Policy. Affiliates include our parent company and any other subsidiaries, joint venture partners or companies under common control with us.
• With business partners: to offer you certain products, services or promotions. Health and medical information is never shared for this purpose.
• With your consent: for any other purpose.

7. Retention of Your Personal Data

We will retain your Personal Data only for as long as it is necessary for the purposes outlined in this Privacy Policy. We will retain and use your Personal Data to the extent required to comply with legal obligations, resolve disputes, enforce our legal agreements and policies, and support business-related activities.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or improve the functionality of the Services, or when we are legally obligated to retain it for longer periods.

8. Transfer of Your Personal Data

Because we serve users in several countries, your information, including Personal Data, may be processed at the Company’s operating offices and in other locations where parties involved in data processing are located, which may be outside your state, province, country or other governmental jurisdiction, including in the United States and Cameroon, where data protection laws may differ from those in your jurisdiction.

By consenting to this Privacy Policy and providing your information, you agree to this transfer. The Company will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy. No transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

9. Delete Your Personal Data

You have the right to request the deletion of your Personal Data that we have collected about you. The Services may provide you with the ability to delete certain information about yourself from within the Service. You may also update, amend or delete your information at any time by signing in to your Account, if you have one, and visiting the account settings section that allows you to manage your personal information.

If you need assistance in deleting your Personal Data, you can contact us using the contact information provided in Section 3 of this Privacy Policy. Please note that we may need to retain certain information when we have a legal obligation or lawful basis to do so.

10. Disclosure of Your Personal Data

10.1 Business Transactions: If the Company is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

10.2 Law Enforcement: Under certain circumstances, the Company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities, such as a court or a government agency, including in the United States, in Cameroon or in other jurisdictions where the Company operates or where you are located.

10.3 Other Legal Requirements: The Company may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

11. Security of Your Personal Data

The security of your Personal Data is of paramount importance to us. While we take all reasonable measures to protect your Personal Data, no method of transmission over the Internet or electronic storage is entirely secure. We employ commercially acceptable safeguards and security practices to protect your data, but we cannot guarantee its absolute security.

We implement a range of security measures, including encryption of data in transit and at rest, role-based access control, audit logging, multi-factor authentication, regular security audits and ongoing staff training, to protect your data from unauthorized access, disclosure, alteration or destruction.

In the event of a data breach that may compromise your information, we will take swift and appropriate action in accordance with applicable laws and regulations to notify you and the relevant authorities, where required.

12. Children’s Privacy

The Services are not intended to be used directly by individuals under the age of 18, and we do not knowingly collect personally identifiable information directly from anyone under the age of 18. Data about children may, however, be processed as dependents covered by an insurance policy, when it is provided by a parent, a guardian, the insurer or the subscribing company.

If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 18 without verified parental consent, we will take prompt steps to remove that information from our servers.

In cases where we need to rely on consent as a legal basis for processing Personal Data, and your country requires parental consent, we will seek and obtain such consent before collecting and using that information.

13. Links to Other Websites

The Services may include links to external websites or resources that are not operated by us, such as the App Store, Google Play or our appointment booking page. We have no control over the content, privacy policies or practices of these third-party sites or services, and we strongly advise you to review the privacy policies of any third-party websites you visit.

These links are provided solely for your convenience and do not imply our endorsement of the content or practices of these third-party websites. We do not assume any responsibility for the content, privacy policies or actions of any third-party websites or services.

14. Changes to this Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our data practices or legal requirements. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating its “Last updated” date. We will also endeavor to inform you via email or by prominently displaying a notice on the Services before the changes become effective.

Please review this Privacy Policy regularly to stay informed about how we are protecting your Personal Data. Changes to this Privacy Policy are effective when they are posted on this page.

15. Contact Us

If you have any questions, concerns or inquiries about this Privacy Policy or our data practices, please contact us:

Your privacy matters to us, and we are committed to addressing any concerns or questions you may have regarding the protection of your Personal Data.