Wispivas Ltd
Clinical registry privacy notice
Effective 3 September 2026 · Version 1.0
Wispivas Ltd is responsible for deciding how information in this registry is used. We collect information needed to coordinate vasectomy-related care, document informed choice and clinical services, follow patients safely, monitor semen-analysis completion, and improve service quality.
Purpose limited
Information is used for care, administration, safety, audit and authorised programme reporting.
Restricted access
Identifiable records are available only to approved staff with a legitimate role and authorised patient or facility scope.
Your rights
You may ask to access or correct your information, object to or restrict some uses, or raise a privacy concern.
Who this notice covers
Patients and prospective patients who book an appointment, submit a registration or informed-choice form, receive a Wispivas-coordinated service, or whose legacy clinical information is migrated into this registry after quality review.
Information collected
Identity and contact information, demographic details, relevant health history, referral and funding information, consent responses, appointments, clinical procedures, follow-up findings, complications and semen-analysis results.
Why Wispivas uses it
To respond to a request for care; support counselling and informed choice; assess, book and document services; conduct postoperative and semen-analysis follow-up; protect patient safety; manage authorised providers and facilities; maintain an audit trail; and produce aggregated or de-identified quality and programme reports. Registration and form linkage are based on the choices recorded in the forms. Some clinical information may also need to be retained or used to meet healthcare, legal, safety or accountability duties.
Sharing and reporting
Identifiable information may be available to approved Wispivas doctors, nurses, laboratory staff, receptionists, pharmacists and registry administrators, the facility involved in care, and contracted technology services that support secure operation of the registry. Each staff role is limited to the information and actions needed for its work. Identifiable information is not used for public reporting. Service reports use aggregated or de-identified information where practical. A sponsor does not receive unrestricted access to an individual clinical record merely because it funded care.
Storage and transfers
The registry uses controlled cloud infrastructure. Where a service stores or processes information outside Kenya, Wispivas must apply contractual, technical and organisational safeguards appropriate to health information and applicable data-protection requirements.
Retention and safeguards
Clinical information is retained only for as long as required by the approved health-record, legal, safety and data-protection schedule, then securely deleted or de-identified where appropriate. Access is role based; provider approval, suspension and deactivation are recorded; and material record actions are audit logged. No online system can promise absolute security, so Wispivas also relies on staff confidentiality, access review, incident response and secure operating procedures.
Your choices and rights
You may request information about how your data is used, access a copy, ask for inaccurate information to be corrected, object to or request restriction of some processing, and request deletion where the law permits. Withdrawing an optional consent does not undo lawful processing already completed and may not require deletion of a clinical record that Wispivas must retain. Wispivas may need to verify your identity before acting on a request.
Questions or requests
Contact Wispivas at charles@wispivas.com or telephone +254 721 547 978. If a concern is not resolved, you may contact or lodge a complaint with Kenya's Office of the Data Protection Commissioner.