This Privacy Policy explains how 12-M Enterprise handles personal data through 12Mcare, the healthcare management platform, and its enabled account, facility, clinical, billing, reporting, communication, and support workflows.
1. Who we are and scope
12-M Enterprise operates 12Mcare, a healthcare management platform. This Policy explains personal-data handling through the public website, account and facility platform, enabled healthcare workflows, APIs, communications, and support. It applies to processing described here and should be read with facility agreements and applicable law.
2. Controller and service-provider roles
12-M Enterprise may act as a controller for its own account administration, security, support, legal, and business purposes. A facility generally decides why and how patient and operational information is used and may act as controller for that information. 12Mcare processes that information as instructed to provide the platform, subject to the facility's notices, lawful basis, permissions, and professional obligations.
3. Account, staff and facility data
12Mcare may process names, email addresses, telephone details, roles, user permissions, authentication and login activity, facility and organisation details, branch or workspace information, configuration, and account-support correspondence.
4. Patient and healthcare operations data
Depending on enabled features and facility use, 12Mcare may process patient identity and contact details, appointments, clinical workflow records, laboratory requests and results, imaging requests and reports, specimen and collection information, signatures, verification records, and other healthcare information entered or generated by authorised users. Facilities remain responsible for lawful collection, notices, consent where required, accuracy, clinical governance, and instructions.
5. Billing and service records
Enabled billing workflows may include service records, prices, invoices, invoice items, payment status, payment references, credits, and related audit or communication records. 12Mcare does not use this Policy to promise a particular payment provider or card-storage arrangement; the applicable provider and facility agreement govern those details.
6. Audit, security and access history
The implementation supports facility-scoped permissions, role checks, authentication controls, audit logs, security events, access history, approvals, amendments, and workflow status records. These records help facilities investigate activity, enforce accountability, protect information, and support legal or operational obligations.
7. Support and communications
We may process information included in support requests, implementation activity, feedback, email, SMS, service notices, reminders, and other communications where the relevant feature is enabled. Facilities and users must keep recipient details accurate and use communications lawfully.
8. How we use information
We use information to authenticate users, provide and secure 12Mcare, maintain facility isolation, operate enabled healthcare workflows, support reporting and billing, send requested service communications, investigate misuse and incidents, improve reliability, and comply with legal obligations or establish and defend claims.
9. Sharing and subprocessors
Information may be processed by providers needed for hosting, database, authentication, storage, security, messaging, email, payments, support, backups, and other enabled platform functions. We may also disclose information to a facility that administers an account, professional advisers, auditors, contractors bound by appropriate duties, or authorities where required or permitted by law. We do not sell personal data as a business.
10. International processing
The location of processing depends on enabled providers and the facility arrangement. Where information is processed across borders, 12Mcare and the responsible facility will use safeguards required by applicable law and contractual instructions. This Policy does not claim a particular provider, country, registration, or certification unless confirmed in the applicable arrangement.
11. Retention, export and deletion
Retention depends on facility obligations, clinical and accounting requirements, security, auditability, service arrangements, backups, disputes, and lawful instructions. We do not invent a universal fixed retention period. Facilities should use available correction, export, closure, and deletion workflows and remain responsible for preserving records they must retain. We may keep limited records where required for law, security, audit, or dispute purposes.
12. Security and incidents
Safeguards supported by 12Mcare include facility-scoped access, role-based permissions, authentication, permission checks, audit logging, controlled workflow actions, backups, and secure development practices. No system is completely secure. Report suspected unauthorised access, loss, disclosure, or misuse promptly to info@12mapp.com; we will assess and respond under applicable law and the relevant facility process.
13. Rights and responsibilities
Depending on applicable law, individuals may request access, correction, deletion, restriction, objection, portability, or information about processing. If information is held in a facility account, contact that facility first because it may determine the purpose and lawful basis. Requests to 12-M Enterprise may be sent to info@12mapp.com and may require identity and authority verification. Ghana's Data Protection Act, 2012 (Act 843) may apply where relevant; this page does not claim registration, certification, or a regulator determination.
14. Cookies and analytics
12Mcare may use session technologies, local storage, security tokens, and similar technologies needed for authentication, security, preferences, and functionality. This Policy does not claim the use of a particular non-essential analytics provider or cookie unless confirmed by the current deployment. Disabling essential technologies may affect the service.
15. Children and policy changes
12Mcare is intended for facilities and authorised users, not children acting independently. We may update this Policy when processing, security, law, or enabled features change; the updated page will show a new effective date.
16. Contact
Privacy and legal questions can be sent to 12-M Enterprise at info@12mapp.com.