Privacy Policy

Who We Are and How to Contact Us

For the purpose of the Data Protection Laws and data processing, we are a Responsible Party. We are a private limited company registered in the Republic of South Africa under Registration Number: 2020 / 082810 / 07. Our registered office is at Eendracht Farm, Dunbrody, Kirkwood District, Eastern Cape, 6120. If you want to request more information about our privacy policy or information regarding data protection you should contact us using the details provided below:

Information Officer & Managing Director: Neville Mark van Breda
Email: info@aidiagnostics.health
Tel: +27728959231 and ask to speak to the Information Officer.

Definition of Personal Information

According to the POPI Act ‘‘Personal Information’’ means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person. The POPI Act, which has more specific examples if you need them, can be found at the following link:
https://www.gov.za/sites/default/files/gcis_document/201409/370672611act4of2013protectionofpersonalinforcorrect.pdf

How We Collect Information

We collect information directly from you when you provide us with your personal details, for example when you purchase and use our product or when you submit enquiries to us or contact us. Where possible, we will inform you what information you are required to provide to us and what information is optional.
As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns including, but not limited to: location; Internet Protocol; address; browser type; access times and duration of your use on our website; searches conducted on our website; your use of our website and any actions taken on our website; device’s operating system; type of device used; and any information stored in cookies that we have on your device. We collect this personal data by using cookies and other similar technologies. Note, however, that if you reject the use of cookies, you
will still be able to visit our websites but some of the functions may not work correctly.

Information We Collect: 

We collect and process personal and non-personal information data. Typically, the information data we collect and process will include identity, contract, transactional, technical, usage, marketing and communications data such as:

• Identity Data: includes first name, last name, title or other identifier, date of birth, gender and images.
• Contact Data: includes billing address, email addresses and telephone numbers.
• Transaction Data: includes details about products you have purchased from us.
• Financial Data includes bank account and payment card details.
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices
  you use to access our website.
• Usage Data: includes information about how you use our website, products and services.
• Health Data: all data generated or used in a professional medical context when our product is used by you. This data includes clinical trial data, biometric data, medical and diagnostic reports.
• Marketing and Communications data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

Please note that we may collect and/or process other personal data from time to time.

How We Use Your Information:

We will use your Personal and Non-Personal Information only for the purposes for which it was collected or agreed with you.

• To provide, maintain, and improve our product and services.
• To analyse usage patterns and enhance user experience.
• Provide your information to your healthcare professional who requests same for your effective treatment.
• For audit and record keeping purposes.
• For market research purposes.
• In connection with legal proceedings.
• Personalise your website experience, as well as to evaluate (anonymously and in the aggregate) statistics on website activity, such as what time you visited it, whether you’ve visited it before and what site referred you to it.
• To assist with our business development.
• To carry out our obligations arising from any contracts entered into between you and us.
• To conduct market or customer satisfaction research or for statistical analysis.
• To contact you regarding products and services which may be of interest to you, provided you have given us consent to do so or you have previously requested a product or service from us and the communication is relevant or related to that prior request and made within any timeframes established by applicable laws.
• To respond to your queries or comments.
• We will also use your Personal Information to comply with legal and regulatory requirements or industry codes to which we subscribe or which apply to us, or when it is otherwise allowed by law.
• To analyse usage patterns and enhance user experience.

How We Share Your Information:

We will not transfer your personal information to a third party without gaining consent first, except in certain circumstances. 

• With Service Providers: We may employ third-party companies and individuals to facilitate our services who will only have access to your information as necessary to perform their tasks on our behalf. We have contracts in place with our data operators. They will not share your personal data with any organisation apart from us. They will hold it securely and retain it for the period we agree.
• For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities, or to enforce agreements with us, including this Privacy Policy.
• Analytics: We may disclose your information to perform analytics as and when needed. If this is done, the information shared will only be done in order to fulfil the purpose. 
• International Transfer: Several of our business and research partners are based outside of the Republic of South Africa. Whenever we transfer your personal data out of the country, we ensure a similar degree of protection is
  afforded to it by ensuring that:
  o The recipient of the information is subject to a law or binding corporate rules or binding agreement which provide an adequate level of protection that effectively upholds principles for reasonable processing of the information that are substantially similar to the conditions for the lawful processing of personal information in South Africa and includes provisions, that are substantially similar to our privacy policy, relating to the further transfer of personal information from the recipient to third parties who are in a foreign country.

Data Security:

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Our systems and website is scanned on a regular basis for security exploits and known vulnerabilities, this includes regular malware scanning. We limit access to your personal data to those employees, agents, contractors, research and business partners and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality. In addition, all sensitive information you supply is encrypted via Secure Socket Layer (SSL) technology.
We follow a de-identification process whereby special personal information data is anonymised.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable information regulator of a breach where we are legally required to do so.

Retention Of Your Personal Information:

We will only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
In some circumstances you can ask us to delete your data (see below for further information).
We may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Your Rights:

Under the data protection laws your rights are:

• To be notified that personal information about you is being collected by us
• To be notified that your personal information has been accessed or acquired by an unauthorised person.
• To establish whether we hold personal information of yours and to request access to your personal information by completing the prescribed Request for Access to Record form which can be found with the following link:
  https://inforegulator.org.za/wp-content/uploads/2020/07/InfoRegSA-PAIA-Form02-Reg7.pdf . Please note that any such access request may be subject to a payment of a legally allowable fee, as laid down in our POPI Act Policy which link to fees can be found with the following link: https://inforegulator.org.za/wp-content/uploads/2020/07/Form-3-PAIA.pdf.
• To request, where necessary, the correction, destruction or deletion of your personal information by completing and submitting the prescribed form found with the following link: https://inforegulator.org.za/wpcontent/uploads/2020/07/FORM-2-REQUEST-FOR-CORRECTION-OR-DELETION-OF-PERSONAL-INFORMATION-OR.pdf .
• To object, on reasonable grounds relating to your particular situation and the processing of your personal information.
• To object to the processing of your personal information at any time for purposes of direct marketing.
• To object to the processing of your personal information for the purpose of direct marketing by means of any form of electronic communication.
• Not to be subject, under certain circumstances, to a decision which is based solely on the basis of the automated processing of your personal information intended to provide you with a profile.
• To submit a complaint to the Regulator regarding the alleged interference with the protection of your personal information or to submit a complaint to the Information Regulator in respect of a determination of an adjudicator.
• To institute civil proceedings regarding the alleged interference with the protection of your personal information.
• Where you have given us consent to process your personal data, you can withdraw that consent at any time either by contacting us using the details set outin this policy.

‍
Please note that you may need to provide identification in order to prove who you are if you wish to invoke any of your rights as provided by the data protection laws and as summarised above.

Applications to Work For Us

If you apply to work for us in any role we may receive data about you from third parties. In addition, we will keep the details of your application and any additional information provided to us by you or others during your application so that we can keep you
informed of future opportunities that you may be interested in. If you do not wish for us to keep your details for this reason, please let us know by contacting us using the details provided in this policy.

Changes to This Privacy Policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on our website with a new effective date. We encourage you to review this policy periodically for any updates.

‍