1. Introduction
Noko Med Center (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you access our website, telehealth services, and other digital platforms. Our practices comply with the Protection of Personal Information Act (POPIA), the General Data Protection Regulation (GDPR), and the marketing guidelines required by Google, Facebook, and other social media platforms. By using our services, you agree to the terms outlined in this policy.

2. Data Controller Information
Noko Med Center
Barclay Square Center, 293 Rissik Street, Sunnyside, Pretoria, South Africa
Phone: +27 12 885 0879
Email: [email protected]
Data Protection Officer: Mpho Masiloane

3. Information We Collect
We may collect and process the following types of information:

• Personal Contact Data: Name, email address, phone number, postal address.
• Health Information: Medical history, treatment details, telehealth consultation records, and related healthcare data.
• Usage Data: Information about your interactions with our website and services (e.g., IP address, browser type, device information, and cookies).
• Marketing Data: Preferences, consent status, and responses to marketing communications.

4. How We Collect Your Information
We gather personal data through several channels:

• Direct Interactions: When you register for our services, book consultations, complete forms, or contact us.
• Automated Technologies: Through cookies, web beacons, and similar tracking technologies when you visit our website.
• Third-Party Sources: With your consent, from trusted partners and digital marketing platforms (e.g., Google and Facebook) to enhance service delivery and marketing efforts.

5. Purpose and Legal Basis for Processing
We process your personal data for these purposes:

• Healthcare Services: To provide high-quality in-person and telehealth consultations, manage treatment records, and improve patient care.
• Customer Support and Communication: To respond to inquiries and provide support or appointment reminders.
• Marketing and Advertising: To send personalised offers, health tips, and information through email, social media, and digital advertising platforms. You may opt-out at any time.
• Analytics and Service Improvement: To analyse user behaviour, monitor website performance, and enhance our services.
• Compliance: To comply with legal obligations under POPIA, GDPR, and other relevant laws.

6. Data Sharing and Third-Party Disclosure
We do not sell your personal data. We may share your information with:

• Service Providers: Trusted third-party vendors (e.g., IT, analytics, customer support) under strict confidentiality agreements.
• Marketing Partners: Platforms such as Google and Facebook for targeted advertising and campaign analytics.
• Legal and Regulatory Authorities: As required to comply with legal obligations or in response to lawful requests.
• Business Transfers: In connection with mergers, acquisitions, or restructuring, provided that adequate safeguards are in place.

7. Data Retention
Your personal data is retained only as long as necessary to fulfil the purposes for which it was collected or as required by law. Once your data is no longer needed, it will be securely archived, anonymized, or deleted.

8. Your Rights
You have the following rights regarding your personal data under POPIA, GDPR, and applicable privacy laws:

• Access: Request access to your personal data.
• Correction: Request corrections to any inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request limitation on the processing of your data.
• Data Portability: Request a copy of your data in a structured, commonly used format.
• Objection: Object to the processing of your data, including for direct marketing purposes.
• Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of previous processing.

To exercise these rights, please contact our Data Protection Officer using the contact details provided below.

9. Security Measures
We implement robust technical and organisational measures (such as access controls, and regular security audits) to safeguard your personal data from unauthorised access, alteration, disclosure, or destruction.

10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your user experience, analyse site usage, and support our marketing efforts. Detailed information on our use of cookies is provided in our Cookie Notice. You may adjust your cookie preferences at any time.

11. International Data Transfers
Your data may be transferred to and processed on servers located outside your country of residence. When such transfers occur, we ensure that appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect your data in accordance with POPIA and GDPR.

12. Updates to This Privacy Policy
We may update this Privacy Policy periodically. Any changes will be posted on our website with an updated effective date. We encourage you to review this policy regularly.

13. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
Phone: +27 12 885 0879
Address: Barclay Square Center, 293 Rissik Street, Sunnyside, Pretoria, South Africa