Privacy Policy
Consent Journey - Aesthetics Journey (Pty) Ltd
1. Aesthetics Journey (Pty) Ltd (“the Company”) recognises and respects all Data Subjects’ legislative and constitutional rights to have their personal information protected, retained in such a way so as to ensure confidentiality, and processed in a manner which is consistent with the Protection of Personal Information Act, 4 of 2013 (“the POPI Act”).
3. In line with the provisions of the POPI Act, you provide us with consent to Process your Personal Information, and we:
- Accept responsibility and accountability to responsibly manage and protect your Personal Information, including your Special Personal Information when related to your health, or healthcare (hereinafter collectively referred to as “your Personal Information”), when providing you with access to and use of this mobile app.
- Undertake to collect and access your Personal Information directly from you or from your healthcare provider, who shall also be a registered user of the mobile app, while respecting your right to withdraw your consent for the processing of your Personal Information.
- Undertake to only collect and process Personal Information which is uploaded to the mobile app, so that the mobile app may serve as a platform to achieve its informed consent purpose.
- Undertake not to share your Personal Information with any third party save for any appointed Operator.
- Undertake to take all reasonably available steps to safeguard and protect your Personal Information through the necessary technological and operations processes.
- Undertake to amend, update, or delete your Personal Information, on your request, subject to the Terms of Use.
- Undertake not to retain Personal Information longer than is required by the relevant legislation governing the healthcare sector.
- Undertake to ensure that we, or our Operator, have appropriate technical and organisational measures to protect and safeguard Personal Information against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access.
- Disclose any data breaches as soon as may be reasonably possible including steps taken to mitigate the extent of any breach, and remedial steps taken.
4. The Personal Information which may be processed shall include:
- Your full names and identity number, and by virtue thereof your sex and age.
- Your contact information.
- Any other relevant identifying information as provided by either you, or your healthcare provider, which may be of relevance in ensuring that you have sufficient information in order to make an informed decision.
- Your health, including your medical history, current diagnosis and prognosis, healthcare options, risks and benefits, and all related information which your healthcare provider deems it necessary for you to make an informed decision.
- Your usage of the mobile app.
5. Your Personal Information will be processed for the following reasons:
- To enable your healthcare provider to provide you with such information as may be required for you to make an informed decision to consent to healthcare services.
- To simplify the process of you considering this information and providing your consent. To create an audit trail relating to consent provided, or declined, as well as any other relevant information, so as to protect you and your healthcare provider in the event of a dispute or query.
- To store your Personal Information on behalf of your healthcare provider as per legislative obligations.
- In connection with possible requirements by the Information Regulator or other Government agencies allowed by law, legal proceedings, or court rulings.
- To improve the functionality of the mobile app.
6. We confirm, and you acknowledge, that we have appointed a company known as Spaza Dot Tech (Pty) Ltd, Registration Number: 2014/210093/07, with whom we have concluded an Operator Agreement as contemplated in the POPI Act.
7. The Operator has bound itself to ensure that we comply with our abovementioned duties and obligations, and any other duties and obligations we may have in terms of the POPI Act and have similarly undertaken to comply fully with the provisions of the POPI Act in relation to the processing of your Personal Information.
8. The Operator will process your Personal Information in a similar, if not identical manner to how we will process your Personal Information, as they act as, inter alia our IT and app hosting infrastructure service providers and consultants.
Questions about this policy
To ask about your Personal Information, or to request that it is amended, updated or deleted, email info@consentjourney.co.za.
Consent Journey Privacy Policy
