Purpose

The purpose of this Privacy Statement is to set out how we collect, use, share and otherwise process your personal information, in a manner that is compliant, ethical, adheres to industry best practice and applicable protection of personal information legislation as enacted from time to time.

Definitions

“The Practice” refers to the medical practice of Mrs Ulaysha Narandas; Practice number: 0257613; Address: Suite 105, Netcare Waterfall City Hospital

“You” and “your” refers to you the patient and any of your dependents which may include your spouse, partner, children and other dependents as the case may be.

“Your personal information” refers to personal and special personal information about you and your dependents (as relevant). It includes information about race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the individual amongst other things. Thus, your personal information comprises information you may have given to us yourself or we may have collected from other sources (e.g. pathology laboratory).

Process(ing) (of) information means the lawful and reasonable automated or manual activity of collecting, recording, organising, storing, updating, distributing and removing or deleting personal information to ensure that such processing is adequate, relevant and not excessive given the purpose for which it is processed.

Competent person means anyone who is legally competent to consent to any action or decision being taken for any matter concerning a patient or dependent – for example a parent, legal guardian or a legal representative appointed by a court to manage the finances, property, or estate of another person unable to do so because of mental or physical incapacity.

How the practice will process and disclose your personal information and communicate with you

The Practice will keep your personal information confidential.

When you engage with the practice, you entrust it with personal information about yourself and, where applicable, your dependents. We are committed to protecting your right to privacy.

We have a duty to take all reasonably practicable steps to ensure your personal information is complete, accurate, not misleading and updated on a regular basis. To enable this, we will always endeavour to obtain personal information from you directly. Where we are unable to do so, we will make use of verifiable independent third-party data sources.

You have the right to object to the processing of your personal information and have a choice whether or not to accept these terms and conditions.

However, it is important to note that we require your acceptance to service you and your dependents’ medical treatment and care.

By submitting your dependents’ relevant personal information, you hereby confirm that you are duly authorised to share such information with us. We will furthermore process their information for the purposes and in the manner set out in this Privacy Statement.

If you are giving consent for a person under 18 (a minor), you confirm that you are a competent person and that you have authority to give their consent on their behalf. If you share your personal information with any third parties, we will not be responsible for how they use this information nor be responsible for any loss suffered by you or your dependents (where applicable).

Your consent and acceptance

You understand and accept that the Practice may process your personal information. We will do so in a manner that complies with the law. We will process your information for the following purposes:

• | for the provision of health care services to you and your dependents;
• | for the administration of you and your dependents’ interactions with the Practice including but not limited to scheduling appointments, referrals to hospital and /or other healthcare professionals, procuring tests and diagnostic procedures, prescribing and dispensing medication, and the processing/payment of accounts, debt collection, etc;
• | for claim submissions to your medical scheme (where applicable);
• | for the provision of relevant information to a contracted third party who requires this information in order to provide a healthcare service to you or your dependents;
• | to share your personal information with external health administrators, managed care providers and other healthcare practitioners for them to assess or evaluate certain clinical information, in the event that you are subject to such a clinical assessment:

6. I to communicate or report to any state regulatory or any other governance body on any matter relating to your personal information that we are by law obliged to communicate and report on.

Examples of when and how we will get and share your personal information include:

• | Getting your personal information from other relevant sources, including other medical practitioners, contracted service providers.
• | Transferring your personal information outside the borders of the Republic of South Africa where appropriate, for example to administer international emergency

3. I If a third party asks the Practice for any of your personal information, we will share it with them only if:

a | you have already given your consent for the disclosure of this information to that third party; or

b | we have a legal or contractual duty to give the information to that third party.

4. l The Practice will provide your personal information to any entity with whom you or your dependent/s already have a relationship; or where you or your dependent/s have applied for a product, service or benefit from such an This information will be provided for the administration of you or your dependent/s products or benefits with such entities.
5. Any medical/scientific data obtained from my procedure/treatment/process may be used anonymously for the furtherance of medical care by way of study/presentation/publication or review for outcomes assessment by this practice. I understand that this consent for collection of data for research is voluntary, that care will be unaffected whether consent is given or not. The data will be kept confidential and there will be no benefit to individual participants. Ethical guidelines for the management of medical data are provided by the Human Research Ethics Committee.

Your rights over your information

You have the right to ask us to update, correct or delete your personal information, unless the law requires us to keep it. Where we cannot delete your personal information, we will take all practical steps to de-personalise it.

Where this Practice is required by law to collect and keep personal information, we shall do so. At a minimum, this includes the following legislation:

• | Medical Schemes Act, 1998
• | The Consumer Protection Act, 2008
• | The Protection of Personal Information Act, 2013
• | Electronic Communications and Transactions Act, 2002
• | Promotion of Access to Information Act, 2002

The Promotion of Access to Information Act (PAIA)

The PAIA was passed to give effect to the constitutional right, held by everyone in South Africa, of access to information which is held by the State or by another person and which is required for the exercise or protection of any right. Where a request is made in terms of PAIA, the body to which the request is made, is obliged to give access to the requested information, except where the Act expressly provides that the information may or must not be released. It is important to note that PAIA recognises certain limitations to the right of access to information, including, but not exclusively, limitations aimed at the reasonable protection of privacy, commercial confidentiality, and effective, efficient and good governance, and in a manner which balances that right with any other rights, including such rights contained in the Bill of Rights in the Constitution. The Protection of Personal Information Act (POPIA) was enacted in November 2013, to promote the protection of personal information processed by public and private bodies. POPIA amended certain provisions of PAIA, balancing the need for access to information against the need to ensure the protection of personal information.

We will take all reasonable steps to confirm your identity before providing details of your personal information in respect of a formal request for such information. We are entitled to charge a fee for this service and will let you know what it is at the time of your request.

Your right to complain

If you believe that this Practice has used your personal information contrary to this Privacy Statement, you have the right to lodge a complaint with the Information Regulator, under POPIA, but we encourage you to first contact the Practice to resolve the complaint.

If, thereafter, you feel that we have not resolved your complaint adequately, kindly contact The Information Regulator at: |JD House | 27 Stiemens Street | Braamfontein | Johannesburg | 2001 or |PO Box 31533

|Braamfontein| Johannesburg | 2017.