At UCCR, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and protect your data when you use our web application, which facilitates the sharing and discussion of clinical cases among healthcare professionals. By using UCCR, you agree to the practices described in this policy.

• Personal Information: Name, email address, profile photo, professional credentials, and other details provided during account creation or profile setup.
• Content Data: Clinical case details, including patient histories, complaints, investigations, images, comments, and reactions you submit to the platform.
• Usage Data: Information about your interactions with UCCR, such as pages visited, features used, and time spent on the platform, collected to improve functionality.
• Technical Data: IP address, browser type, device information, and cookies to ensure secure access and optimize performance.

• Service Delivery: To provide access to UCCR’s features, including case sharing, discussions, and profile management.
• Collaboration: To facilitate communication and collaboration among healthcare professionals through case discussions and comments.
• Improvement: To analyze usage patterns and feedback to enhance platform features, performance, and user experience.
• Security: To detect and prevent fraudulent activities, unauthorized access, and other security threats.
• Compliance: To comply with legal obligations, including data protection regulations and professional standards.

• With Other Users: Case data and comments you post are visible to other UCCR users to enable collaboration, unless marked private.
• Service Providers: We may share data with trusted third-party providers (e.g., cloud storage, analytics) who assist with platform operations, bound by confidentiality agreements.
• Legal Requirements: We may disclose data if required by law, court order, or to protect the rights, property, or safety of UCCR, its users, or the public.
• De-identified Data: We may share aggregated, anonymized data for research or statistical purposes, ensuring no individual is identifiable.

• Encryption: We use industry-standard encryption (e.g., TLS) to protect data during transmission and storage.
• Access Controls: Only authorized personnel have access to personal data, subject to strict confidentiality obligations.
• Regular Audits: We conduct periodic security audits to identify and address vulnerabilities.
• Incident Response: We have procedures to respond promptly to any data breaches, including notifying affected users where required.

• Access: Request a copy of your personal data held by UCCR.
• Rectification: Update or correct inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal or contractual obligations.
• Restriction: Request limitation of data processing under certain conditions.
• Portability: Receive your data in a structured, machine-readable format for transfer to another service.
• Objection: Object to data processing based on legitimate interests or for direct marketing.

Article 6: Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, or resolve disputes. Clinical case data may be retained longer to support ongoing collaboration, unless you request deletion. Account data is deleted within 30 days of account closure, except where retention is required by law.

Article 7: Cookies and Tracking Technologies

UCCR uses cookies and similar technologies to enhance user experience, authenticate users, and analyze usage. Essential cookies are required for platform functionality, while optional cookies (e.g., analytics) can be disabled via your browser settings or our cookie consent tool. We respect Do Not Track signals where applicable.

Article 8: Third-Party Links

UCCR may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.

Article 9: International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including those with different data protection laws. We ensure such transfers comply with applicable laws, using safeguards like Standard Contractual Clauses or adequacy decisions.

Article 10: Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised effective date. For significant changes, we will notify you via email or in-app notifications. Continued use of UCCR after updates constitutes acceptance of the revised policy.

Article 11: Contact Us

For questions, concerns, or to exercise your data rights, contact our Data Protection Officer at:
Email: privacy@uccr.com
Address: Martyrs Road, Boma A, Mbarara, Uganda
We aim to respond within 7 days. If unsatisfied, you may lodge a complaint with your local data protection authority.