Privacy Policy

1. Information We Collect

1.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name, contact details, and professional qualifications
• Medical practice information and registration details
• Payment and billing information
• Communication preferences

1.2 Health Information

As a healthcare platform, we handle sensitive health information including patient records, medical history, diagnoses, and treatment information. This information is protected under POPIA and the Health Professions Council of South Africa (HPCSA) guidelines.

1.3 Usage Data

We automatically collect certain information when you use our platform:

• IP address and location data
• Browser type and version
• Pages visited and time spent
• Device information

2. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain our medical practice management services
• To process payments and manage billing
• To communicate with you about our services
• To comply with legal and regulatory requirements
• To improve our services and develop new features
• To ensure platform security and prevent fraud
• To provide customer support

3. Legal Basis for Processing

In accordance with POPIA, we process your personal information based on the following conditions:

• Consent: Where you have provided explicit consent
• Contract: To perform our contractual obligations
• Legitimate Interest: For our legitimate business interests
• Legal Obligation: To comply with applicable laws and regulations
• Public Interest: For public health and safety purposes

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With your explicit consent
• With service providers who assist us in operating our platform
• When required by law or to protect our rights
• In connection with a business transfer or merger
• To protect the health and safety of individuals

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication measures
• Regular backups and disaster recovery procedures
• Employee training on data protection

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are determined based on:

• The nature of the information
• The purpose for which it was collected
• Legal and regulatory requirements
• Industry best practices

7. Your Rights

Under POPIA, you have the following rights regarding your personal information:

• Right to Access: Request access to your personal information
• Right to Correction: Request correction of inaccurate information
• Right to Deletion: Request deletion of your personal information
• Right to Object: Object to processing in certain circumstances
• Right to Withdraw Consent: Withdraw consent where processing is based on consent
• Right to Complain: Lodge a complaint with the Information Regulator

8. International Data Transfers

Your information may be transferred to and processed in countries other than South Africa. We ensure that such transfers comply with POPIA requirements and implement appropriate safeguards to protect your information.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our platform. For more information about our use of cookies, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You may also lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg/.