In plain language
Information helps us care for you.
Penda may collect information when you visit a Medical Center, use telemedicine or Chat na Penda, attend a community outreach activity, contact customer service, use a website form or otherwise interact with Penda. This can include identity and contact details, records of your interactions, payment or cover information and the health information needed to provide care.
Why Penda uses information
- To assess your needs, provide care and maintain an accurate health record.
- To coordinate consultations, tests, medicines, referrals and follow-up.
- To confirm payment, SHA or insurance arrangements and process claims where applicable.
- To respond to questions, feedback or complaints and improve Penda services.
- To meet legal, regulatory, reporting and patient-safety responsibilities.
Chat na Penda
WhatsApp is a doorway into care.
Use Penda’s official one-to-one WhatsApp conversation and share the information the clinical or support team asks for. Avoid putting health information into public groups. WhatsApp is operated by a third party and its own privacy terms also apply. If you are unsure what to send, ask the Penda team first.
Ask Penda on WhatsAppWhen information may be shared
Penda may share information when it is necessary to provide or coordinate care, complete a payment or cover process, work with a laboratory, insurer, SHA, referral provider or service supplier, or meet a legal obligation. Penda expects organisations handling information on its behalf to protect it and use it only for the agreed purpose.
Security and retention
Penda uses administrative, technical and physical safeguards intended to protect personal information from unauthorised access, use, alteration or disclosure. Information is retained for as long as it is needed for care, legal, regulatory and operational purposes, then handled according to Penda’s retention processes.
Your data rights
Under Kenya’s data protection framework, you may have the right to be informed about how your information is used, access information held about you, object to certain processing, and ask for inaccurate or misleading information to be corrected or deleted where the law allows.
To make a request or ask a privacy question, email legal@pendahealth.com. Penda may need to confirm your identity before acting on a request.
More information
This notice should be read with the consent and care information provided during a Penda interaction. Kenya’s Office of the Data Protection Commissioner publishes further guidance on the processing of health data.
Last updated 23 July 2026.