Privacy Policy

1. Introduction

MEDMB IT (Pty) Ltd ("MEDMB IT", "we", "us", or "our") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African legislation.

By using our website or submitting information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein.

2. Responsible Party

The responsible party for the purposes of POPIA is:

3. Information We Collect

We collect personal information that you voluntarily provide to us when you:

• Complete our contact form on the website
• Send us an email or telephone us
• Request a product demonstration or consultation
• Enter into a service agreement with us

The types of personal information we may collect include:

• Name — to identify and address you
• Email address — to respond to your enquiry
• Phone number — to contact you regarding your enquiry
• Organisation or practice name — to understand your context and tailor our response
• Message content — to understand and respond to your request

4. How We Use Your Information

We process your personal information only for the specific purposes for which it was collected, including:

• Responding to your enquiries and requests
• Providing you with information about our products and services
• Fulfilling our contractual obligations to you
• Sending you relevant communications related to your enquiry
• Improving our website and services
• Complying with legal obligations

We will not use your personal information for purposes other than those stated above without your prior consent, unless required by law.

5. Lawful Basis for Processing

In terms of POPIA, we rely on the following lawful grounds for processing your personal information:

• Consent — you have provided your explicit consent via our contact form
• Contractual necessity — processing is necessary for the performance of a contract to which you are a party
• Legitimate interest — processing is necessary for our legitimate business interests, provided your rights are not overridden
• Legal obligation — processing is necessary to comply with applicable laws

6. Sharing of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• With our trusted service providers who assist us in operating our website and delivering our services (e.g., email hosting providers), subject to appropriate data processing agreements
• When required by law, regulation, or court order
• To protect the rights, property, or safety of MEDMB IT, our clients, or others

7. Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include encrypted communications (HTTPS), secure server infrastructure, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for a period of 12 months after the last interaction, unless a longer retention period is required for contractual or legal purposes. After this period, your information will be securely deleted or anonymised.

9. Your Rights Under POPIA

Under the Protection of Personal Information Act, 2013, you have the following rights:

• Right to access — you may request confirmation of whether we hold your personal information and request access to it
• Right to correction — you may request that we correct or update inaccurate or incomplete personal information
• Right to deletion — you may request that we delete your personal information, subject to any legal obligations we may have to retain it
• Right to object — you may object to the processing of your personal information on reasonable grounds
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time
• Right to lodge a complaint — you have the right to lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us at info@medmb.co.za. We will respond to your request within a reasonable time, and in any event within 30 days.

10. Cookies and Analytics

Our website may use cookies and similar technologies to improve your browsing experience and to analyse website usage. We use self-hosted analytics tools that are configured to respect your privacy and comply with POPIA. Session recordings, where enabled, are configured with appropriate data masking to prevent the capture of personal information. You may configure your browser to refuse cookies, though this may affect your experience on our website.

11. Information Regulator

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa:

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please do not hesitate to contact us: