top of page

Privacy Policy

Gateway Mental Health Rehabilitation Centre

Gateway Mental Health Rehabilitation Centre (“Gateway,” “we,” “us,” or “our”) is committed to protecting the privacy, dignity, and confidentiality of our clients, patients, website visitors, and service users. This Privacy Policy explains how we collect, use, store, and protect personal and sensitive information in accordance with Zimbabwe’s Cyber and Data Protection Act [Chapter 12:07].

Information We Collect

We may collect and process the following information:

a) Personal Information

  • Full name, date of birth, gender

  • National identification details (where legally required)

  • Contact details (phone number, email address, physical address)

  • Emergency contact information

b) Health & Sensitive Personal Data

  • Mental health and medical information

  • Assessments, treatment records, and rehabilitation plans

  • Information shared during therapy, counselling, or consultations

  • Admission and discharge records

c) Website & Technical Information

  • IP address

  • Browser and device information

  • Pages visited and usage data

  • Cookies and similar tracking technologies

Purpose of Data Collection

Your information is collected and used to:

  • Provide mental health rehabilitation, care, and support services

  • Conduct assessments and develop treatment plans

  • Communicate regarding appointments, care, and follow-ups

  • Maintain clinical and administrative records

  • Comply with legal, regulatory, and professional obligations

  • Improve our services and website functionality

Legal Basis for Processing

We process personal and sensitive data:

  • With your consent

  • Where necessary for the provision of healthcare services

  • To comply with legal obligations

  • To protect the vital interests of the client or others

Confidentiality & Data Security

Gateway maintains strict confidentiality and:

  • Stores records securely (physical and electronic)

  • Limits access to authorised staff only

  • Uses appropriate technical and organisational safeguards

  • Trains staff on confidentiality and data protection obligations

Disclosure of Information

We do not sell, rent, or trade personal information.

Information may be disclosed only:

  • With your written consent

  • For continuity of care with healthcare professionals

  • When required by law or a lawful authority

  • Where necessary to prevent serious harm to the client or others

Cookies & Website Use

Our website may use cookies to:

  • Improve user experience

  • Analyse website traffic

  • Enhance website functionality

You may manage or disable cookies through your browser settings.

Your Rights

Under Zimbabwean data protection law, you have the right to:

  • Access your personal information

  • Request correction of inaccurate or outdated data

  • Withdraw consent where applicable

  • Request deletion of data, subject to legal and clinical record-keeping requirements

  • Lodge a complaint regarding misuse of your data

Data Retention

We retain personal and health information only for as long as:

  • Necessary to provide care and rehabilitation services

  • Required by Zimbabwean law, health regulations, or professional standards

Third-Party Service Providers

We may use trusted third-party service providers (e.g., website hosting, appointment systems). These providers are required to safeguard your information and use it only for authorised purposes.

Changes to This Policy

Gateway may update this Privacy Policy from time to time. Updates will be posted on our website with a revised effective date.

bottom of page