Privacy Policy

1. Introduction

Dr. Zandile Spengane Dermatologist ("we", "our", "the Practice") is committed to protecting your privacy and ensuring the responsible handling of your personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and all applicable South African legislation.

This Policy applies to all patients, website visitors, and individuals whose personal information we process. By using our website or engaging our services, you acknowledge this Policy.

2. Information We Collect

We may collect the following categories of information:

• Personal identifiers: full name, date of birth, ID number, contact details
• Medical and health information: medical history, diagnoses, treatment records, skin images
• Financial information: medical aid details, payment records
• Technical data: IP address, browser type, pages visited (collected automatically via our website)

3. Purpose of Processing

We process your information for the following purposes:

• Providing medical diagnosis, treatment, and follow-up care
• Medical billing and processing of medical aid claims
• Scheduling and managing appointments
• Complying with legal and regulatory obligations (HPCSA, POPIA, NHA)
• Communicating important health information to you
• Improving our website and services

4. Sharing of Information

We do not sell your personal information. We may share your information with:

• Other healthcare providers involved in your care (referrals, specialists)
• Medical aid schemes for the purposes of billing
• Our billing service provider (Vericlaim) and debt collection service
• Regulatory authorities (HPCSA, SARS) where legally required

All third parties are required to maintain the confidentiality of your information.

5. Retention of Records

Medical records are retained for a minimum of 6 years from the date of last treatment for adults, and until the age of 21 for minors, as required by the National Health Act and HPCSA guidelines. Financial records are retained for 5 years as per SARS requirements.

6. Your Rights

Under POPIA you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of information (subject to legal retention obligations)
• Object to the processing of your information
• Lodge a complaint with the Information Regulator (South Africa)

7. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or destruction. All digital records are stored securely and access is restricted to authorised personnel only.

8. Cookies

Our website may use cookies to improve your browsing experience. These cookies do not collect personally identifiable information. You may disable cookies in your browser settings.

9. Contact Us

For privacy-related queries or to exercise your rights, please contact: