Draft Policy

Privacy policy

This draft is prepared for UPMPA operational use and should be reviewed by association leadership and legal advisors before final publication.

Data collected

The platform collects account details, practitioner and facility registration data, location and contact details, ownership or directorship information, services, specialties, licenses, photos, uploaded documents, review actions, audit logs, and notification records.

Purpose of processing

Data is used to receive applications, verify records, support association review, maintain internal audit trails, publish approved registry information, and communicate with applicants about registration status.

Public visibility

Only approved registry fields are displayed publicly. Private documents, national identity numbers, internal notes, staff-only decisions, and raw application payloads are kept out of public registry pages.

Retention and correction

Registry and audit records should be retained for association accountability and legal/operational needs. Applicants may request correction, restriction, or review of their records through official UPMPA support channels.