Bomaid Privacy Notice
At Bomaid we are committed to protecting your personal information by handling of all the personal information collected in accordance with best confidentiality practices and applicable laws.
Our Data Privacy Notice explains how and when we collect personal data from and about you, why we do so and how we treat this information. It also explains your rights in relation to the collection of personal information and how you can exercise those rights.
We regularly review the Privacy Notice to make sure it’s up-to-date and to bring any relevant changes to your attention.
Please read this Privacy Notice carefully as it sets out important information relating to how we handle your personal information.
- The types of information we collect and process
- How we obtain personal information
- Do we have lawful reason to collect personal information
- Sharing of personal information
- How we protect your personal information
- Your data protection rights
- Transfer of data
- Links to Third Party Websites
- Questions, Requests or Complaints
The types of information we collect and process
We currently collect and process the following personal information:
- Personal details: name, gender, marital status, date and place of birth, dependents details and relationship, educational background, employer, and employment history;
- Identification details: identification numbers issued by government bodies or agencies (e.g. Omang (ID number), passport number, marriage certificate, birth certificate);
- Financial information: Bank account number and details, bank statements and payslip;
- Health Data: current or former physical or mental medical conditions, health status, injury or disability information, medical procedures performed, relevant personal habits (e.g. smoking or consumption of alcohol), prescription information, medical history;
- Previous claims: information about previous claims, which includes health data;
- Marketing data: customer satisfaction data, data about how you interact with the Bomaid website, mobile apps, text messages, social media pages, and emails
- Website and communication usage: IP address, browser cookies, and device data
How we obtain personal information
Most of the personal information we collect, and process is provided to us directly by you, or by your guardian, in person, telephonically, online, via email, or from written correspondence in the following scenarios:
- establishing a relationship with you and assessing your most appropriate schemes and benefits
- collection of subscriptions, paying claims, processing and facilitating other payments.
We also receive personal information indirectly, from the following sources in the following scenarios:
- your employer- payroll and subscriptions collections data
- marketing and profiling- marketing interactions to provide you with information about our products, benefits, and services
- market research- customer satisfaction surveys and other market research
- website and mobile device applications- website and mobile app cookies (please also see our Website and Mobile App Cookie Notice).
How we obtain Sensitive Information
Most of the sensitive information we collect, and process is provided to us in the following scenarios:
a) Service Provider and Suppliers -through Authorisations for medical health services. Managed care registration- Registration under managed care.
Do we have lawful reason to collect personal information
The lawful bases we rely on for processing information are:
(a)Your consent. You are able to remove your consent at any time. You can do this by emailing us at privacy@bomaid.co.bw
b) We have a contractual obligation – because we have duties and promises you and Bomaid have agreed to be fulfilled as part of a legally binding contract
c) We have a legal obligation – have a legal duty or responsibility
d) We have a vital interest – the processing is necessary to protect someone’s life
e) We need it to perform a public task - the processing is necessary for you to perform a task in the public interest
f) We have a legitimate interest – the processing takes place within the client relationship, and is necessary for direct marketing purposes, to prevent fraud or to ensure the network and information security of our IT systems.
Sharing of personal information
We may share your personal information with third party service providers who have been appointed by contract as data processors to perform specialist functions and services on our behalf.
We do not sell, otherwise disclose, or share data we collect and hold about you, with anyone else.
How we protect your personal information
Your information is securely stored at all times. We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Service providers who perform functions and services on our behalf are contractually and legally obligated to ensure adequate data security measures are in place; and may not use that data for any other purpose.
Your data protection rights
Under data protection law, you have rights in relation to personal information that we hold about you including:
- Your right of access - You have the right to ask us for copies of your personal information.
- Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate.
- Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You have the right to “opt out” of receiving marketing communications at any time. You can do this by
i. emailing unsubscribe@bomaid.co.bw to indicate you no longer wish to receive marketing communications, or by
ii. writing to us at the address set out below.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
If you wish to make a request, please contact the Bomaid Data Protection Officer by emailing or writing to us at the details below.
Transfer of data
In order to provide you with the products and services you require from us, we may transfer to, and store the data we collect about you in, countries other than Botswana. In doing so, we implement measures to protect your data and comply with all relevant legal requirements laws and regulations of Botswana.
Where we transfer personal information to a country outside the above schedule, we will only do so if
i. the country to which the personal information will be transferred has been approved by the Information and Data Commissioner
ii. there are appropriate safeguards in place to protect your personal data at all times during its transfer
You may request more information about the safeguards that we have put in place in respect of transfers of personal information by contacting the Bomaid Data Protection Officer at the email address or postal address below.
Links to Third Party Websites
Our websites and mobile apps may contain links to other third-party websites. If you follow a link to any of those third-party websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for their policies or processing of your personal information. Always check their policies before you submit any personal information to such third-party websites.
Data Retention
Should you be separated from Bomaid for any reason possible, the society will maintain your data for a period no longer than the period stipulated by the law before deletion.
Questions, Requests or Complaints
If you have any queries, concerns, or requests about how your personal information is used or our privacy practices, please feel free to contact us at the following details:
Bomaid Data Protection Officer
Postal address: P.O. Box 632, Gaborone, Botswana
Plot 50638, Fairgrounds, Gaborone
Email address: privacy@bomaid.co.bw
If you are still not satisfied, you can also submit a complaint to the Information and Data Protection Commissioner.
