Privacy Policy

1. Introduction

Aphile Medical Centre ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or use our services.

By using our website or services, you consent to the practices described in this policy.

2. Information We Collect

We may collect the following categories of personal information:

• Identity information: Full name, date of birth, identity or passport number.
• Contact information: Phone number, email address, physical address.
• Health information: Medical history, symptoms, diagnoses, prescriptions, and treatment records (collected during consultations).
• Financial information: Payment details where applicable (processed securely and not stored on our systems).
• Technical information: IP address, browser type, pages visited, and cookies when using our website.

3. How We Use Your Information

We use your personal information to:

• Provide medical consultations, treatments, and pharmacy services
• Issue prescriptions and maintain accurate patient records
• Respond to your enquiries and booking requests
• Send appointment reminders and health-related communications
• Improve our services and website experience
• Comply with our legal and regulatory obligations under South African law
• Coordinate care with other healthcare providers where necessary

4. Health Information (Special Personal Information)

Health information is classified as special personal information under POPIA. We process your health information only for the purpose of providing you with healthcare services, with your explicit consent. We implement appropriate safeguards to protect the confidentiality and security of all health records in line with the National Health Act and POPIA requirements.

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Healthcare professionals: Doctors, specialists, or other clinicians involved in your care.
• Service providers: Third-party suppliers who assist us in operating our services (bound by confidentiality agreements).
• Regulatory authorities: Where required by law, including the HPCSA, SAHPRA, or law enforcement.

6. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device. You can disable cookies in your browser settings, though this may affect website functionality.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Patient health records are stored securely in compliance with applicable South African legislation.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Patient medical records are retained in accordance with the National Health Act requirements (minimum 6 years for adults, until age 26 for minors).

9. Your Rights Under POPIA

As a data subject, you have the following rights under POPIA:

• Right to access your personal information held by us
• Right to request correction of inaccurate information
• Right to request deletion of your information (subject to legal obligations)
• Right to object to the processing of your information
• Right to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact our Information Officer at: [PLACEHOLDER: [email protected]]

10. Information Regulator

If you believe your personal information has been mishandled, you have the right to lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

For privacy-related enquiries, to access or correct your data, or to lodge a complaint, contact our Information Officer: