Privacy Policy

Last updated: 1 January 2025

1. Introduction

DocuHealth (Pty) Ltd ("DocuHealth", "we", "us") is committed to protecting your privacy and personal information. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the rights you have over it, in alignment with the Protection of Personal Information Act (POPIA) and, where applicable, the General Data Protection Regulation (GDPR).

2. Information we collect

We collect information you provide directly, including account details (name, email, phone, organisation), and information needed to operate the service. Where your organisation uses DocuHealth to process patient data, that data is processed on your behalf as a data processor, under your instructions.

3. How we use your information

We use personal information to provide and improve the platform, process transactions, provide support, send service communications and, with consent, marketing communications. We do not sell personal information and we never use patient data to train third-party models.

4. Lawful bases

We process information on lawful grounds including performance of a contract, legitimate interests, legal obligation and, where required, consent. You may withdraw consent at any time.

5. How we share information

We share information only with service providers who help us operate the platform, under data processing agreements, and where required by law. We do not share personal information with third parties for their own marketing purposes.

6. Data security

We protect information using encryption in transit and at rest, access controls, audit trails and other technical and organisational measures described on our Security page.

7. Retention

We retain information only as long as necessary for the purposes for which it was collected, or as required by law, after which it is securely deleted or anonymised.

8. Your rights

You have the right to access, correct, request portability of, restrict and, in some cases, request deletion of your personal information, and to lodge a complaint with the Information Regulator (South Africa) or your local supervisory authority.

9. Contact

For privacy questions or to exercise your rights, contact us at hello@docuhealth.africa or write to 90 Rivonia Road, Johannesburg, South Africa.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified through the platform or by email. The "Last updated" date at the top reflects the latest revision.