Privacy Policy

1. Introduction

COA Health Technologies SARL (“COA”, “we”, “our”, or “us”) is committed to protecting the privacy of individuals who use our website (coa-platform.com), our clinical platform, and related services (collectively, the “Services”). This Privacy Policy describes how we collect, use, store, share, and protect your personal information in compliance with Cameroon Law No. 2010/012 of 21 December 2010 on Cybersecurity and Cybercriminality, and the General Data Protection Regulation (GDPR) where applicable to international users.

2. Information We Collect

2.1 Information You Provide

• Account registration: name, email address, phone number, professional credentials (for healthcare providers), facility name
• Demo requests: facility name, facility type, contact information, role, expressed challenges
• Contact forms: name, email, subject, and message content
• Newsletter subscriptions: email address

2.2 Information Collected Automatically

• Usage data: pages visited, time on site, clicks, scroll depth (via Google Analytics 4)
• Device information: browser type, operating system, device type, screen resolution
• Network information: IP address (anonymized after 90 days), approximate location (country/city level)
• Cookies: as described in our Cookie Policy

2.3 Clinical Platform Data

Patient health records and clinical data processed within the COA platform are subject to separate data processing agreements with each healthcare facility. COA does not access, use, or share patient health data for any purpose other than operating the contracted service. All patient data is stored within the facility's local infrastructure and is subject to the healthcare facility's own data governance policies.

3. How We Use Your Information

• To respond to inquiries and process requests (demo requests, contact forms)
• To create and manage your COA account
• To send transactional emails (account verification, password reset, booking confirmations)
• To send marketing communications, with your explicit consent (newsletter)
• To improve the website and services through aggregated analytics
• To comply with legal obligations under Cameroonian law
• To detect and prevent fraud and abuse

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers: Email delivery (SendGrid), analytics (Google Analytics 4), CRM (HubSpot), all under data processing agreements
• Legal requirements: When required by Cameroonian law, court order, or government authority
• Business transfers: In the event of a merger or acquisition, with advance notice

5. Your Rights

Under Cameroonian law and GDPR (for EU/EEA residents), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data where lawful
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing for marketing purposes at any time
• Withdrawal of consent: Withdraw consent for any consent-based processing

To exercise any right, contact: [email protected]

6. Data Retention

Account data is retained for as long as your account is active. Closed account data is deleted within 90 days, except where retention is required by law. Analytics data is anonymized after 90 days. Demo request data is retained for 2 years for business follow-up purposes.

7. Security

All data in transit is protected with TLS 1.3 encryption. Data at rest is encrypted using AES-256. We conduct regular security assessments and maintain an incident response plan. In the event of a data breach affecting your rights, we will notify you within 72 hours.

8. Contact

COA Health Technologies SARL
Bastos, Rue 1.XXX, Yaounde, Cameroon
Email: [email protected]
Phone: +237 6XX XXX XXX