1. Introduction

MedVisit is committed to protecting the privacy and personal information of healthcare practitioners, clinic staff, patients, and all users of the MedVisit platform.

This Privacy Policy explains how we collect, process, store and protect personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa.

2. Information We Collect

User Information

• First and last name
• Email address
• Phone number
• User role
• Professional title
• Authentication details

Clinic Information

• Clinic name
• Practice information
• Staff accounts
• Billing information

Patient Information

• Patient demographics
• Medical history
• Consultation notes
• Diagnoses
• Prescriptions
• Appointments
• Uploaded medical documents

Technical Information

• IP addresses
• Browser and device information
• Audit logs
• Login history
• Platform usage information

3. Why We Process Information

• Manage appointments
• Maintain patient records
• Enable communication between clinics and patients
• Send appointment reminders
• Generate reports
• Improve platform functionality
• Meet legal obligations
• Prevent fraud and unauthorized access

4. Special Personal Information

MedVisit processes health information, which is classified as Special Personal Information under POPIA.

Such information is only accessible to authorised healthcare professionals and authorised clinic staff.

5. Sharing Information

We never sell personal information.

Information may be shared with:

• Healthcare professionals within your clinic
• Cloud hosting providers
• SMS and communication providers
• Payment providers
• Authorities where required by law

6. Security

We protect information using reasonable technical and organisational safeguards including:

• HTTPS encryption
• Role-based access control
• Password hashing
• Audit logging
• Secure authentication
• Security monitoring

7. Data Retention

Information is retained only for as long as necessary to provide services or comply with legal obligations.

8. Your Rights

• Request access to your information
• Correct inaccurate information
• Request deletion where legally permitted
• Withdraw consent where applicable
• Lodge complaints with the Information Regulator

9. Data Breaches

Should a security incident affect your personal information, MedVisit will investigate the incident and notify affected parties where required by POPIA.

10. Information Officer

Privacy enquiries may be directed to:

Email: privacy@medvisit.co.za

11. Changes to this Policy

This policy may be updated periodically. The latest version will always be available within the MedVisit platform.