Who we are
Lumen Christi Medical Ltd. (“we”, “us”) runs this website and is the data controller for the personal data collected through it, within the meaning of the Data Protection Act, 2020 (Jamaica).
This policy covers the website only. Your medical records at the practice are held under doctor–patient confidentiality and the practice’s patient privacy notice, which you can request at reception.
What we collect
We collect only what you choose to send us, plus the minimum needed to run the site securely:
- Contact form — your name, email address, optional phone number, the topic you choose and your message.
- Appointment requests — made through our practice booking system embedded on this site: your name, contact details, the service and time you ask for, and any reason you give.
- WhatsApp — if you message us, WhatsApp (Meta) handles that conversation under its own privacy policy.
- Usage statistics — anonymous, aggregated page counts from Vercel Analytics. It uses no cookies and does not identify you.
- Security logs — our hosting provider records technical details such as IP address and browser type to keep the site secure.
How we use it
To reply to your enquiry, to arrange and confirm appointments, to run and protect this website, and to meet our legal obligations. We do not sell your information, and we do not use it for marketing without your consent.
We rely on your consent, on steps you ask us to take before you become a patient, on our legitimate interest in operating a secure website, and on legal obligations. Health information is sensitive personal data: we process it only as far as needed to provide care, with your explicit consent or as the Act otherwise permits.
Please keep medical details out of the contact form
The contact form is for general questions. Please do not send symptoms, results or other health information through it — we will discuss those with you in person or through our booking system.
Who helps us handle it
We share information only with service providers acting on our instructions, bound to keep it confidential and secure:
- Vercel — website hosting and anonymous analytics.
- Convex — the database that stores contact-form messages.
- Resend — delivers contact-form messages to our inbox.
- DocNotez — our practice management and booking system.
- Google — the embedded map, when you interact with it.
Transfers outside Jamaica
Some of these providers store or process data outside Jamaica, including in the United States. Where they do, we take the steps the Act requires to make sure your information remains adequately protected.
How long we keep it
Contact-form messages are kept for up to twelve months and then deleted, unless they become part of your medical record. Appointment information is kept as part of your medical record for as long as the law requires.
Keeping it secure
The site is served only over an encrypted connection, access to messages is limited to authorised staff who sign in, and our providers maintain industry-standard security. No system is perfectly secure, but we act promptly on any concern.
Your rights
Under the Data Protection Act, 2020 you may:
- ask for a copy of the personal data we hold about you;
- ask us to correct anything that is inaccurate;
- ask us to stop or limit processing, or withdraw consent you have given;
- object to decisions made about you solely by automated means;
- complain to the Office of the Information Commissioner (Jamaica).
Children
If you are under 18, please ask a parent or guardian to contact us or book on your behalf.
Changes and contact
We will update this policy when our practices change, and the date at the top will show when. To exercise any of your rights or ask a question, write to us through our Contact page or speak to our front desk.