Privacy Policy

1. Who we are

PocketPractice is operated by Constrast (Pty) Ltd, a South African private company. We provide healthcare practice administration software to registered practitioners, agents and institutions.

2. Information we collect

• Account information: name, email, phone, role, HPCSA registration number, BHF practice number.
• Patient information uploaded by practitioners: identity number, date of birth, contact details, medical aid scheme, diagnosis and procedure codes.
• Claim and billing records, audit trails, and integration logs.
• Technical data: IP address, browser, device type, and usage logs.

3. How we use information

We process personal information to deliver the service, submit claims to medical aid schemes, support practitioners and patients, prevent fraud, comply with healthcare law, and improve the platform.

4. Lawful basis

Processing is carried out on the basis of contract performance, legal obligation, the legitimate interests of practitioners providing care, and your consent where required by POPIA.

5. Sharing

We share information with medical aid schemes (via MediKredit), payment providers, infrastructure providers, and regulators where required by law. We do not sell personal information.

6. Retention

Patient records and claims are retained for at least seven years in line with HPCSA and medical scheme requirements. Audit logs are retained for the duration of the account plus statutory periods.

7. Security

We apply technical and organisational controls including encryption in transit, role based access, audit logging, and South African data residency for production data.

8. Your rights

You may request access, correction, deletion, or restriction of your personal information, withdraw consent, and lodge a complaint with the Information Regulator.

9. Contact

Information Officer: to be appointed. Email: privacy@pocketpractice.co.za.