POPIA Notice

This notice is provided in terms of section 18 of the Protection of Personal Information Act, 2013 (POPIA).

1. Responsible party

Constrast (Pty) Ltd, trading as PocketPractice, is the responsible party for personal information processed through the platform.

2. Information Officer

An Information Officer is to be appointed and registered with the Information Regulator. Until appointed, enquiries are handled by the Privacy Contact at privacy@pocketpractice.co.za.

3. Source of information

Personal information is collected directly from data subjects, from registered practitioners acting on behalf of their patients, and from medical aid scheme responses received through MediKredit.

4. Purpose of processing

• Account creation and authentication.
• Submission of claims to medical aid schemes.
• Patient record keeping in support of healthcare delivery.
• Billing, invoicing and payment processing.
• Audit trail and regulatory compliance.

5. Categories of personal information

Identifying details, contact details, medical aid membership, special personal information including health information processed under the lawful basis of section 32 of POPIA.

6. Recipients

MediKredit Integrated Healthcare Solutions, contracted medical aid schemes, payment service providers, infrastructure providers under written processing agreements, and regulators where required by law.

7. Cross border transfers

Production patient data is stored in South Africa. Operational and development data may be processed in jurisdictions with equivalent protection under POPIA section 72.

8. Data subject rights

You may request access, correction, deletion, restriction, or object to processing. You may withdraw consent where processing was based on consent. You may lodge a complaint with the Information Regulator.

9. Consequences of not providing information

Where information is required for service delivery or legal compliance, failure to provide it will prevent us from creating an account or submitting claims.

10. Contact the Information Regulator

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. Email: complaints.IR@justice.gov.za.