Privacy information
Updated 29 September 2026 · Current pilot service
Who to contact
Tastro ZW Pty Ltd T/A Vanhu provides PracticeOS. Send account or privacy enquiries to support@vanhu.net. For access to or correction of a patient record, contact the practice that holds the record first.
Information used by the service
PracticeOS uses account identity and email, practice contact details, staff roles, and the records authorised users enter, including patient, appointment, billing and medical aid information. It also stores uploaded practice logos and documents, and records audit events for supported actions.
Why it is used and who can access it
Information is used to sign users in, link them to practices, operate practice workflows, manage subscriptions and investigate service problems. Access to practice records depends on practice membership and role. Vanhu’s platform administration screens show practice account information; that role alone does not grant access to patient records.
Service providers
Clerk provides email account authentication. Sites hosting and its Cloudflare infrastructure provide application, database and file services. UptimeRobot checks public health endpoints and sends availability alerts; those endpoints return service status, not patient records. These services may process information outside Zimbabwe. Confirm the applicable hosting, transfer and contractual arrangements with Vanhu before live patient use.
Retention and leaving the service
Removing a staff member’s access does not delete practice records. Cancellation does not automatically delete them either. The practice owner should arrange export, retention and deletion with Vanhu before closing the account. A fixed retention period is not established in this pilot notice.
Your requests
Contact the practice about its patient records and Vanhu about your platform account. Requests may require identity and authority checks. For information about Zimbabwe’s data protection framework, visit POTRAZ.
Before entering real patient information
Use fictional records until the practice and Vanhu have confirmed launch readiness and the required data-handling arrangements. This notice describes the current pilot; it does not certify regulatory compliance or replace the practice’s own patient privacy notice.