Privacy Policy

Swartland Medical Centre, trading as Tuinstraat Mediese Sentrum Inc (Registration: 2022/536641/21), is a licensed medical practice located at 15 Tuin Street, Malmesbury, 7300, Western Cape, South Africa. Practice Number: 1563718. Contact: accounts@drsnnb.co.za | 022 482 2552. We are the Responsible Party (as defined by POPIA) for personal information we process about you.

We collect the following categories of personal information: Identity & Contact: Full name, ID number, date of birth, gender, address, phone, email Medical Information: Medical history, diagnoses, medications, allergies, laboratory results, clinical notes Financial: Medical aid details, payment information Digital: Website cookies, IP addresses, form submissions Employment: For occupational health services — employer details, job role We collect only what is necessary for providing your healthcare and running our practice.

We process your personal information for: • Providing medical consultation, diagnosis, and treatment • Patient registration and record keeping • Appointment management and scheduling • Medical aid billing and claim submission • Dispensing medication and managing prescriptions • Communication regarding your healthcare • Occupational health reporting (as required by law) • Legal and regulatory compliance • Public health reporting (notifiable conditions, as required by law)

We implement appropriate technical and organisational measures to protect your personal information against: • Unauthorised access, disclosure, or alteration • Loss, theft, or accidental destruction Measures include: secure electronic health records, password-protected systems, physical security of premises, staff confidentiality obligations, and regular security reviews.

We do not sell or share your personal information for marketing purposes. We may share information with: • Medical aid schemes — for billing and claims purposes • Referring specialists — for your clinical care • Laboratories / diagnostic facilities — for test requests and results • Pharmacies — for prescription management (where applicable) • Health authorities — for notifiable disease reporting as required by law • Compensation Commissioner — for IOD claims (with your consent) All third-party sharing is subject to confidentiality obligations and POPIA compliance.

Medical records are retained in accordance with South African law: • Adults: Minimum 6 years from date of last visit • Children: Until age 21, or 6 years from date of last treatment, whichever is later • Deceased patients: Minimum 6 years from date of death Financial records are retained for a minimum of 5 years in accordance with the Companies Act.

You have the following rights under POPIA: • Access: Request to see your personal information we hold • Correction: Request correction of inaccurate information • Deletion: Request deletion in certain circumstances (subject to legal retention obligations) • Objection: Object to the processing of your information • Complaint: Lodge a complaint with the Information Regulator To exercise any of these rights, submit a written request to our practice manager at accounts@drsnnb.co.za.

Our website uses cookies and similar technologies to: • Improve user experience and website functionality • Analyse website traffic (via anonymised analytics) • Remember your preferences You can disable cookies in your browser settings, but some website features may not function properly. We do not use cookies to track you across other websites for advertising purposes.

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa: Website: www.justice.gov.za/inforeg Email: inforeg@justice.gov.za Tel: 010 023 5207

This Privacy Policy may be updated from time to time. The current version is always available on this website. Material changes will be communicated to patients via SMS or email where contact details are available.