1. Introduction:

Welcome to OnlyMed (Pty) Ltd., a leading healthcare platform dedicated to providing exceptional medical services. This Privacy Policy outlines our commitment to safeguarding your privacy and protecting your personal information. We value the trust you place in us, and we are committed to maintaining the confidentiality and security of your data.

 

2. Purpose of the Privacy Policy:

This Privacy Policy aims to inform you about the types of personal information we collect, how we use it, and your rights regarding your data. By using our website and services, you agree to the collection and use of information as described in this policy.

3. Commitment to User Privacy and Data Protection:

At OnlyMed (Pty) Ltd., we are dedicated to ensuring the privacy, confidentiality, and security of your personal information. We comply with the Protection of Personal Information Act (POPIA) and other applicable South African data protection laws and regulations.

We are committed to:

• Transparency: We will be transparent about the data we collect and how it is used.
• Lawfulness: We will only collect and process your data for lawful purposes.
• Purpose Limitation: We will only collect your data for specified, explicit, and legitimate purposes.
• Data Minimization: We will collect only the data that is necessary for the purposes for which it is processed.
• Accuracy: We will ensure that your data is accurate, relevant, and up-to-date.
• Storage Limitation: We will retain your data for the period necessary to fulfill the purposes outlined in this Privacy Policy.
• Integrity and Confidentiality: We will protect your data from unauthorized access, disclosure, alteration, and destruction.

By entrusting us with your personal information, you can be assured that we will handle it responsibly and in accordance with applicable laws.

 

2. Types of Information Collected:

Personal Information:

We collect the following types of personal information when you use our website, OnlyMed (Pty) Ltd. (hereafter referred to as "OnlyMed"):

• Name: We collect your full name to address you properly and personalize your experience.
• Email Address: Your email address is collected for communication purposes, such as sending appointment confirmations and notifications.
• Address: In certain instances, we may collect your physical address for specific services, like home visits or deliveries.
• Contact Number: We collect your contact number to reach you for appointment confirmations and other essential communications.
• IP Address: We may collect your IP address for security and analytical purposes, helping us to ensure the safety and functionality of our website.
• Cookies and Similar Technologies: OnlyMed may use cookies, web beacons, and similar technologies to enhance user experience, track user behavior, and gather information about how you interact with our website. You can manage your cookie preferences through your browser settings.

Special Categories of Personal Information:

OnlyMed does not intentionally collect any special categories of personal information as defined under South African data protection laws. We do not request information about your race or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, genetic data, biometric data, health information, or information about your sex life or sexual orientation.

Children's Information:

OnlyMed is not intended for children under the age of 18. We do not knowingly collect personal information from individuals in this age group. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will promptly remove such information from our records.

 

3. How Information is Collected:

3.1. Registration Forms: We collect personal information through registration forms when you create an account or subscribe to our services. The information you provide may include your name, contact details, and other necessary data for account creation and service delivery.

3.2. Cookies and Similar Technologies: We use cookies and similar technologies to collect data on your browsing behavior and interactions with our website. Cookies are small text files that are stored on your device. They may capture information about your device, browser type, IP address, and web pages visited. These technologies help us improve your user experience, analyze website traffic, and personalize content.

3.3. Third-Party Services: Our website may integrate with third-party services, such as social media platforms or analytics tools. When you interact with these services on our website, they may collect data about your activities and interactions. Please refer to the respective third-party service's privacy policies for details on their data collection and processing practices.

3.4. Automatic Data Collection: We may automatically collect certain data through server logs, including your IP address, browser type, operating system, and date/time of access. This information helps us manage website security, analyze usage patterns, and enhance our services.

3.5. Opting Out: You have the option to manage or disable cookies through your browser settings. However, please note that certain website features may not function properly if you choose to disable cookies.

3.6. Consent: By using our website, you consent to the collection methods described in this section. We may seek your explicit consent for specific data processing activities as required by applicable South African data protection laws.

 

4. Purposes of Data Collection:

Explanation of Data Collection:

OnlyMed (Pty) Ltd. collects personal information from users for specific and lawful purposes. We are committed to ensuring that your privacy is protected and that your personal data is processed in compliance with the Protection of Personal Information Act (POPIA) and other applicable South African laws and regulations.

Purpose of Collection:

We collect personal information to provide our users with efficient and personalized healthcare services. The following are the primary purposes for which we collect and process your personal data:

1. Service Provision: We collect your personal information to facilitate the booking of appointments with healthcare practitioners, enabling seamless access to medical services.

2. Transaction Processing: Your data is used to process transactions related to appointment bookings and payments, ensuring secure and efficient payment processing.

3. User Experience Improvement: We may analyze the data to enhance our website's functionality, user interface, and overall user experience. This analysis helps us tailor our services to meet your specific needs.

4. Communication: We use your contact details to send you appointment confirmations, reminders, and important updates related to your healthcare services.

5. Customer Support: Your personal information may be used to respond to your inquiries, resolve issues, and provide customer support services effectively.

6. Legal Compliance: We collect and process your data to comply with applicable legal requirements and regulations, including record-keeping obligations under South African laws.

Types of Collected Information and Usage Details:

• Name and Contact Information: Your name, email address, and phone number are collected to identify you, confirm appointments, and provide communication regarding your bookings.

• Appointment Details: Information about your booked appointments, including date, time, and practitioner details, is collected to facilitate your medical consultations.

• Payment Information: If you choose to pay online, your credit card or payment details are securely processed by our payment service providers. Only necessary transaction information is retained for billing purposes.

• Technical Information: We collect technical data, including IP addresses and device information, to analyze user behavior and improve our website's performance and security.

• User Preferences: Information about your preferences and interactions with our platform may be analyzed to personalize your experience and provide relevant recommendations.

Please be assured that your personal data is treated with utmost confidentiality and is never shared with unauthorized third parties. We are committed to safeguarding your privacy and ensuring the secure processing of your information in compliance with South African data protection laws.

 

5. Data Sharing:

5.1 Sharing of Collected Data:

We may share the personal information collected through OnlyMed (Pty) Ltd. (referred to as "OnlyMed" or "we") with specific third parties under certain circumstances. These parties include:

• Third-Party Service Providers: We may share your data with trusted third-party service providers who assist us in operating our website, conducting our business, or providing services to you. These service providers are contractually bound to keep your information confidential and secure and are prohibited from using it for any other purpose.

• Business Partners: In some cases, we may partner with other businesses or organizations to provide you with specific services or offers. We will only share your information with these partners if you have opted to receive such communications, and you can opt-out at any time.

5.2 Purposes for Data Sharing:

We share your personal information with third parties for the following purposes:

• Service Provision: Sharing data with third-party service providers is essential for the provision of our services. These providers assist us in hosting our website, processing payments, managing appointments, and delivering other services to you.

• Improving Services: We may share data with analytics and marketing partners to analyze website usage patterns and user preferences. This information helps us enhance user experience, optimize our services, and offer tailored content.

• Legal Compliance: We may share your information when required by law or in response to valid legal processes, including subpoenas, court orders, or government requests.

5.3 Consent and Control:

We will not share your personal information with third parties for marketing purposes without your explicit consent. You have the right to opt-out of such data sharing by updating your preferences in your account settings.

5.4 Data Sharing Transparency:

If you have questions or concerns about how your data is shared, please contact us using the details provided in the "Contact Us" section below.

 

6. User Control:

6.1 Access, Edit, and Deletion of Personal Information:

Users have the right to access, edit, or request the deletion of their personal information held by OnlyMed (Pty) Ltd. If you wish to exercise this right, please contact us using the details provided in the "Contact Information" section below. We will respond to your request within the timeframe required by applicable law.

6.2 Opting Out of Data Collection:

Users can choose not to provide certain personal information; however, this may limit their access to specific services or features offered by OnlyMed (Pty) Ltd.

6.3 Unsubscribing from Marketing Communications:

Users have the option to unsubscribe from marketing communications, such as newsletters, promotional emails, or other marketing materials sent by OnlyMed (Pty) Ltd. You can unsubscribe by following the instructions provided in the marketing communication or by contacting us through the methods listed in the "Contact Information" section below.

6.4 Cookie Settings:

OnlyMed (Pty) Ltd may use cookies and similar technologies. Users can manage cookie preferences through their web browser settings. Please note that disabling certain cookies may impact the functionality of the website.

 

7. Data Security:

Introduction:

At OnlyMed (Pty) Ltd., protecting your personal information is our utmost priority. We have implemented stringent security measures to safeguard your data from unauthorized access, disclosure, alteration, and destruction. Our commitment to your privacy extends to the rigorous standards we maintain concerning data security.

Encryption and Secure Transmission:

All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS (Secure Sockets Layer/Transport Layer Security) protocols. This encryption ensures that any information exchanged between you and OnlyMed remains confidential and secure.

Access Control and Authentication:

Access to user data is restricted to authorized personnel only. Our systems employ robust access control mechanisms, including strong authentication procedures, ensuring that only authorized individuals within our organization have access to specific user data. Access rights are regularly reviewed and updated based on job roles and responsibilities.

Secure Storage:

User data is stored in highly secure databases protected by advanced firewall technologies. Our servers are hosted in secure data centers with restricted physical and network access, further enhancing the safety of your information. Additionally, all stored data is encrypted to add an extra layer of protection.

Regular Security Audits and Monitoring:

We conduct regular security audits and vulnerability assessments to identify and address potential security risks promptly. Our systems are continuously monitored for unusual activities, and any suspicious behavior triggers immediate investigation and response protocols.

Employee Training and Awareness:

Our staff undergoes comprehensive training on data security and privacy practices. They are educated about the importance of safeguarding user data and are bound by strict confidentiality agreements. Regular awareness programs ensure that our team remains vigilant and proactive in maintaining the security of your information.

Incident Response Plan:

In the event of a data breach or security incident, OnlyMed has a robust incident response plan in place. This plan outlines the steps we take to investigate, mitigate, and communicate any security breaches promptly. We adhere to South African data protection laws and regulations, reporting incidents to the relevant authorities when required.

 

8. Retention Period:

Data Retention Statement: OnlyMed (Pty) Ltd. ("OnlyMed") is committed to retaining your personal data only for as long as necessary to fulfill the purposes for which it was collected, in compliance with the Protection of Personal Information Act (POPIA) of South Africa. This retention period may vary based on legal requirements, business needs, and user consent.

Retention Criteria: The retention period of your data is determined by the following criteria:

1. Legal Requirements: OnlyMed may retain certain personal data for a period required by South African laws and regulations, such as tax laws and healthcare regulations. Specific data categories and retention periods dictated by applicable laws will be adhered to.

2. Business Needs: OnlyMed retains data necessary for its legitimate business interests, including but not limited to customer service, dispute resolution, system maintenance, and legal compliance. Data will be retained for the duration necessary to fulfill these purposes.

3. User Consent: If you have provided explicit consent for the processing and retention of your personal data for specific purposes, OnlyMed will retain the data until the consent is withdrawn. Withdrawal of consent can be made by contacting us through the provided contact information.

Data Review and Purging: OnlyMed regularly reviews the data it holds and ensures that any personal information that no longer serves its intended purpose or no longer requires legal retention is securely deleted or anonymized to prevent identification of individuals.

Data Deletion Requests: Users have the right to request the deletion of their personal data held by OnlyMed. To make such a request or inquire about your data's retention, please contact us using the contact details provided in this Privacy Policy. Please note that certain data may be exempt from deletion due to legal obligations or other compelling legitimate reasons.

Children's Data: OnlyMed does not knowingly collect or retain personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete such information promptly.

Review and Modification of Retention Policy: OnlyMed reserves the right to review and modify its data retention policy periodically to ensure alignment with legal requirements, business needs, and user expectations. Any changes to the retention period will be updated in this Privacy Policy.

 

9. Updates to the Privacy Policy:

At OnlyMed (Pty) Ltd., we are committed to ensuring the privacy and security of your personal information. As our services evolve, we may need to update our Privacy Policy to reflect these changes and to comply with the applicable laws and regulations in South Africa. It is important for you to know that we may update this Privacy Policy periodically without prior notice to you.

Notification of Changes:

When we make any material changes to our Privacy Policy, we will post a prominent notice on our website, www.onlymed.co.za, indicating that the Privacy Policy has been updated. We may also notify you via email or through other means before the changes become effective, especially if the changes are significant and impact your rights. It is your responsibility to review our Privacy Policy periodically to stay informed about how we are protecting your personal information.

Effective Date of Updates:

Any changes or updates to the Privacy Policy will be effective from the date they are posted on our website unless otherwise specified. Your continued use of our services after the updated Privacy Policy has been posted constitutes your acceptance of the revised policy. If you do not agree with the changes, please do not use our services and contact us if you have concerns about the changes.

 

 

10. Contact Information:

For any privacy concerns, questions, or requests related to your personal information and this Privacy Policy, you can contact us using the following details:

OnlyMed (Pty) Ltd.
Registered Address:
151 5th St, Sandown, Sandton, 2031
South Africa

Email Address: 
dpo@onlymed.co.za

Phone Number:
+27 87 700 1846

Please ensure that your inquiry includes your full name and, if applicable, your account username or ID to help us assist you effectively. We aim to respond to privacy-related inquiries within a reasonable timeframe in accordance with South African data protection laws.

 

11. Legal Compliance:

Compliance with South African Data Protection Laws:

OnlyMed (Pty) Ltd. operates in full compliance with the Protection of Personal Information Act (POPIA) of South Africa. POPIA sets forth the standards for processing personal information, ensuring the privacy and security of individuals' data. We are committed to adhering to the principles and requirements outlined in POPIA.

Key Points of Compliance:

• Consent: We obtain explicit and informed consent from individuals before collecting and processing their personal information.

• Purpose Specification: Personal information is collected for specific, lawful, and legitimate purposes related to the services we provide. We do not process data in ways incompatible with these purposes.

• Data Minimization: We collect only the minimum amount of personal information necessary to fulfill the intended purpose of processing.

• Data Security: Rigorous security measures are in place to protect personal information from unauthorized access, disclosure, alteration, and destruction. This includes encryption, access controls, and regular security audits.

• Data Subject Rights: Individuals have the right to access, rectify, and delete their personal information. We respect these rights and provide mechanisms for data subjects to exercise them.

• Data Transfers: Personal information is not transferred outside of South Africa without ensuring adequate data protection measures and compliance with applicable laws.

Contact Information:

For any inquiries related to data protection and privacy, including the exercise of data subject rights under POPIA, please contact our Data Protection Officer at:

Email: dpo@onlymed.co.za
Postal Address: 151 5th St, Sandown, Sandton, 2031, South Africa
Phone: +2787 700 1846

Updates to Compliance:

This Privacy Policy is regularly reviewed to ensure ongoing compliance with POPIA and any other applicable data protection laws. Updates will be promptly implemented, and users will be informed of any material changes as required by law.