Privacy and health data notice
How Horizon Santé protects your personal and health data.
In brief
- We collect the minimum information.
- We never ask about your symptoms online.
- No cookies, no advertising trackers.
- Your data stays in Cameroon.
- You can access, correct or delete it.
Demo note: on this demo website, no data leaves your browser: all submissions are simulated.
Data controller
Horizon Santé SARL (fictional company), Rue des Flamboyants, lot 27, Bonamoussadi, Douala. Data protection officer: Mr Franck Epée, dpo@horizonsante.cm.
Legal framework
Cameroonian Law No. 2024/017 of 23 December 2024 on the protection of personal data, in force since 23 June 2026: health data is sensitive data, processed with your explicit consent. For people located in the European Union (for example a relative booking from London or Paris), the GDPR also applies.
What we process, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Online booking | Identity, date of birth, phone, optional email, general reason (specialty, scan or check), payment method | Explicit consent (data that may reveal a health condition) | 12 months after the appointment for administration; the medical record is a separate processing, subject to medical retention rules |
| Administrative form | Name, contact details, subject, message | Consent | 12 months |
| Parents back home programme | Contact details of the relative abroad | Written consent of the patient | Programme duration + 12 months |
| Reminders (text, WhatsApp) | Phone number | Consent | Until the appointment |
Data minimisation
The booking form has no free-text field about symptoms. The administrative form must not be used for medical information. Our WhatsApp line is for administrative questions only.
Recipients
Authorised reception staff and the doctor concerned; our text-message provider, under contract, with data hosted in Cameroon. We never sell or share data.
Hosting and transfers
Your data is hosted in Cameroon. Any transfer outside Cameroon (for example a report sent to a relative in Europe) only happens with the patient’s written consent and in line with the authorisation regime of Law No. 2024/017.
Security
Named access accounts, encrypted connections (HTTPS), access logs, regular backups and a data breach notification procedure.
Storage in your browser
This website uses no cookies. It stores a few items in your browser, all prefixed horizon-sante::
| Key | Where | Purpose | Duration |
|---|---|---|---|
horizon-sante:rdv-brouillon | Tab session | Your choices from steps 1 to 3 of the booking (reason, specialty, doctor, date) — no identity data — so they are not lost if you reload. | Deleted on confirmation or when the tab closes |
horizon-sante:creneaux-reserves | Tab session | Slots you have just booked, so they no longer appear as free. | When the tab closes |
horizon-sante:rdv-memorise | This device | Only if you tick the box: reference, date, time and doctor of your appointment (no name, no specialty). | Until the appointment, or “Forget” button |
horizon-sante:affichage | This device | Your display settings (text size, contrast, spacing, motion). | Until you reset them |
horizon-sante:badge-hidden | Tab session | The demo banner has been hidden. | When the tab closes |
Your rights
You have the right to information, access, rectification, objection and erasure, to withdraw your consent at any time, and to data portability. Write to our data protection officer: we reply within one month. Proof of identity is required for health data.
Complaints
Contact our data protection officer first (dpo@horizonsante.cm), then, if needed, the personal data protection authority established by Law No. 2024/017. EU residents may contact the authority of their country (in France, the CNIL; in the UK, the ICO).
Last updated: 1 October 2026.