Privacy Policy

1. WHO WE ARE

This Privacy Policy explains how Find Your Doctor ("we", "us") collects and processes your personal information in line with the Protection of Personal Information Act, 2013 (POPIA). We are the responsible party for the information processed through the app, except that treating practitioners are responsible parties for the clinical records they create.

2. INFORMATION WE COLLECT

• Account and profile: name, email, phone, and (for patients) date of birth, gender and contact details.

• Health information (patients): medical history, allergies, medication, medical-aid details, documents you upload, consultation records, and any optional health information you choose to provide. This is special personal information and is processed with your consent for the purpose of your care.

• Practitioner information (doctors): HPCSA registration, identity and practice documents, and banking details for payouts.

• Payment information: transaction records; card data is handled by our payment processor (Paystack) and not stored by us.

• Technical and usage information: device type, app version, and in-app activity used to operate, secure and improve the service.

3. HOW WE USE YOUR INFORMATION

To create and manage your account; to enable and record consultations; to process payments and payouts; to verify practitioners; to provide support; to keep the service secure; to meet legal and regulatory obligations; and to improve the app.

4. LAWFUL BASIS AND CONSENT

We process personal information to perform our agreement with you, to comply with the law, for our legitimate interests, and, for health information, with your consent. You may withdraw consent, subject to the impact on our ability to provide the service.

5. WHO WE SHARE IT WITH

• The practitioner you consult, according to the sharing choices you make.

• Our service providers, including hosting (Google Cloud / Firebase) and payments (Paystack), under appropriate safeguards.

• Authorities where required by law.

We do not sell your personal information.

6. WHERE YOUR INFORMATION IS HOSTED

We host data in the Google Cloud africa-south1 (Johannesburg) region. Where any processing occurs outside South Africa, we apply safeguards required by POPIA.

7. SECURITY

We use encryption in transit, access controls, custom-claim-gated administration and least-privilege rules to protect your information. Sensitive files are served through short-lived, signed links rather than public URLs.

8. RETENTION

We keep personal information only as long as necessary for the purposes above or as required by law (including retention periods that apply to health records), after which it is deleted or de-identified.

9. YOUR RIGHTS

Subject to law, you may request access to, correction or deletion of your personal information, object to processing, or lodge a complaint with the Information Regulator (South Africa). To exercise a right, contact us below.

10. CHILDREN

Accounts are for adults. A parent or guardian may act on behalf of a minor and is responsible for the information they provide.

11. CHANGES

We may update this Policy. Material changes will be notified in the app.

12. CONTACT

Information Officer: privacy@findyourlocum.co.za. General support: support@findyourlocum.co.za.