1. Introduction

When you use our services, you're trusting us with your information. We understand this is a big responsibility and work hard to protect your information and put you in control.

This Privacy Policy is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information.

2. Information We Collect

We collect information to provide better services to our users. The types of information we collect include:

2.1 Information You Provide

When you create an account or use our services, you provide us with personal information that includes:

• Your name and contact information
• Account credentials
• Payment information when required
• Communication preferences

2.2 Automatic Information

We automatically collect and store certain information when you use our services:

• Device information and identifiers
• Log information and usage statistics
• Location information when enabled
• Browser type and settings

3. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services. Specifically, we use your information to:

• Provide and personalize our services
• Process transactions and send related information
• Send notifications and updates about our services
• Maintain security and verify identity
• Analyze and improve our services

4. Information Sharing and Disclosure

We do not share personal information with companies, organizations, or individuals outside of our company except in the following cases:

4.1 With Your Consent

We will share personal information with companies, organizations, or individuals outside of our company when we have your consent to do so.

4.2 For Legal Reasons

We will share personal information if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to:

• Meet any applicable law, regulation, legal process, or enforceable governmental request
• Enforce applicable Terms of Service
• Detect, prevent, or otherwise address fraud, security, or technical issues
• Protect against harm to the rights, property, or safety of our users

5. Data Security

We work hard to protect our users from unauthorized access to or unauthorized alteration, disclosure, or destruction of information we hold. In particular:

• We encrypt our services using SSL
• We review our information collection, storage, and processing practices
• We restrict access to personal information to employees who need that information

6. Your Rights as a Data Subject (POPIA)

Under the Protection of Personal Information Act (POPIA), 2013, and in compliance with GDPR standards, you have the following rights regarding your personal and medical information:

6.1 Right of Access

You have the right to:

• Request confirmation of whether we hold personal information about you
• Access your personal and medical information in our records
• Receive a copy of your information in a commonly used format
• Request details about how your information is being processed

6.2 Right to Correction

You have the right to:

• Request correction of inaccurate or incomplete personal information
• Update your contact details, medical history, or other records
• Have incorrect information amended within a reasonable timeframe

6.3 Right to Deletion ("Right to be Forgotten")

You have the right to request deletion of your personal information when:

• The information is no longer necessary for the purposes it was collected
• You withdraw consent (where consent was the legal basis for processing)
• You object to the processing and there are no overriding legitimate grounds
• The information has been unlawfully processed

Important: We may be required to retain certain medical records for legal, regulatory, or healthcare continuity purposes as mandated by South African law, even after a deletion request.

6.4 Right to Restrict Processing

You have the right to request that we temporarily restrict processing of your information when:

• You contest the accuracy of the information
• The processing is unlawful but you prefer restriction over deletion
• We no longer need the information but you need it for legal claims

6.5 Right to Object

You have the right to object to:

• Processing of your information for direct marketing purposes
• Processing based on legitimate interests or public interest
• Automated decision-making and profiling

6.6 Right to Data Portability

You have the right to:

• Receive your personal information in a structured, commonly used, machine-readable format
• Transmit your information to another healthcare provider (where technically feasible)

6.7 Right to Withdraw Consent

Where we process your information based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

6.8 How to Exercise Your Rights

To exercise any of these rights, please contact our Information Officer:

We will respond to your request within 30 days as required by POPIA. If we need more time, we will inform you and explain the reason for the delay. Please note that we may request proof of identity to protect your information.

6.9 Right to Lodge a Complaint

If you believe we have not handled your personal information appropriately, you have the right to lodge a complaint with the Information Regulator of South Africa:

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date at the top.

Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of such changes.