Privacy Policy

1. Introduction & Scope

Welcome to Kodafriq Data Management Solutions ("Kodafriq", "we", "our", or "us"). We provide a specialized digital platform for healthcare talent verification, clinical credentialing, and employer matching across Africa and globally.

This Privacy Policy applies to all individuals who access our website, create candidate or employer accounts, submit credential documents, or interact with our services (collectively, the "Platform"). By using Kodafriq, you acknowledge and consent to the data practices described herein.

2. Information We Collect

To deliver accurate healthcare talent credentialing and matching, we collect the following categories of data:

• Identity & Contact Details: Full name, government-issued photo ID, date of birth, nationality, residential address, telephone number, and email address.
• Clinical Credentials & Licensure: Certified diplomas, medical degrees, official board licenses, ICD-10/CPT coding credentials (CPC, CCS, CIC), issuing authority registries, and credential verification numbers.
• Employment & Background History: Curriculum vitae, past healthcare employer references, clinical experience records, and verified background check disclosures.
• Technical & Telemetry Data: IP address, device operating system, browser specifications, login timestamps, and platform audit logs collected for security and fraud prevention.
• Financial & Transaction Details: Bank account numbers, payout routes, and escrow transaction histories (processed securely via regulated third-party payment gateways; we never store raw card security codes).

3. How We Use Your Information

We process your information under lawful legal bases for the following operational purposes:

• Talent Verification & Credentialing: Validating the authenticity of healthcare qualifications, licenses, and coding certifications with official registry databases.
• Employer Matching: Presenting verified candidate profiles to prospective healthcare employers, hospitals, and clinical research facilities seeking qualified talent.
• Contract Execution & Milestone Escrow: Facilitating digital employment agreements, managing milestone deliverables, and executing verified Friday payouts.
• Platform Security & Compliance: Safeguarding accounts against unauthorized access, credential forgery, identity theft, and malicious cyber activity.

4. Data Sharing & Third-Party Disclosures

Kodafriq does not sell, rent, or trade your personal data to advertisers or third parties. We only disclose information in strictly defined circumstances:

• Verified Employers & Healthcare Facilities: Once a healthcare candidate applies or agrees to be matched, their verified credentials and professional summary are made accessible to authorized healthcare employers.
• Official Licensing Boards & Verification Partners: We coordinate with accredited verification registries to authenticate clinical credentials.
• Escrow & Banking Partners: Information required to execute legitimate contract disbursements and milestone escrow releases.
• Legal & Regulatory Obligations: When mandated by applicable law, court order, or official healthcare regulatory directive.

5. Security, Encryption & Healthcare Compliance

We implement stringent role-based access control (RBAC), multi-factor authentication for administrative staff, continuous server monitoring, and immutable audit logs tracking every administrative review of personal data.

6. Data Retention & Storage

We retain personal and credentialing data for as long as your account remains active or as required to fulfill legal, regulatory, and audit requirements. If you request account closure, we securely anonymize or delete your records, subject to statutory healthcare record retention mandates.

7. Your Rights & Choices

Depending on your jurisdiction, you possess the following rights regarding your personal information:

• Right of Access: Request a copy of the personal and verification data we maintain on your profile.
• Right of Rectification: Request correction of inaccurate, outdated, or incomplete credentials.
• Right to Erasure: Request deletion of your personal data where retention is no longer legally justified.
• Right to Restrict Processing: Request restrictions on how your profile is displayed or matched.
• Data Portability: Obtain your verified skills and credentials in a portable, structured digital format.

8. Contact Our Data Protection Office

If you have questions, inquiries, or wish to exercise any of your privacy rights, please reach out directly to our Data Protection Team: