Privacy Policy

1. Introduction

Dr. Carla Els ("we", "us", "the practice") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and all applicable South African privacy legislation.

This policy explains what personal information we collect, why we collect it, how it is used, and what your rights are. By using this website, you acknowledge that you have read and understood this policy.

2. Information We Collect

2.1 Information You Provide

• Name and contact details submitted via the contact or appointment request form
• Information about the patient (name, age, symptoms) where voluntarily provided
• Correspondence sent to the practice by email or other means

2.2 Information Collected Automatically

• Browser type, device type, and IP address (anonymised where possible)
• Pages visited and time spent on site (via analytics)
• Cookie data — see our Cookies Notice

2.3 Clinical Records

Patient health records are maintained separately under the National Health Act 61 of 2003 and are subject to additional protections. Clinical records are not collected or stored via this website.

3. How We Use Your Information

• To respond to appointment requests and practice enquiries
• To communicate information relevant to your consultation
• To improve the functionality and content of this website
• To comply with legal and regulatory obligations

We do not sell, rent, or trade your personal information to third parties. We do not use your information for direct marketing without your express consent.

4. Legal Basis for Processing

We process your personal information on one or more of the following lawful bases:

• Consent — where you have voluntarily submitted information
• Legitimate interest — to operate and improve the practice
• Legal obligation — where required by law

5. Data Retention

Website contact and enquiry information is retained for no longer than 12 months, after which it is securely deleted unless it has become part of a clinical record or there is a legal obligation to retain it. Clinical records are retained in accordance with the Health Professions Act and HPCSA guidelines.

6. Data Security

We implement reasonable technical and organisational measures to protect personal information from unauthorised access, loss, or disclosure. All data transmission via this site is encrypted using TLS.

7. Third-Party Services

This website may use third-party tools including analytics providers and hosting services. These providers are selected for compliance with applicable privacy standards. No sensitive clinical information is shared with these providers.

8. Your Rights (POPIA)

Under POPIA, you have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal obligations)
• Object to processing of your information
• Lodge a complaint with the Information Regulator

Information Regulator (South Africa): inforegulator.org.za

9. Contact

For privacy-related requests or queries, contact our Information Officer at: secretary@lungspecialist.co.za