Privacy Policy

Updated: 2026-08-19 13:46 SAST
POPIA Patient Confidentiality Data Protection

1. Purpose

4FR Health is committed to protecting the privacy, confidentiality, and security of our patients’ personal and medical information. This policy explains how we collect, use, store, and share personal information in line with the Protection of Personal Information Act (POPIA) and applicable healthcare obligations.

Effective date: 1 September 2025.

2. Information We Collect

We may collect the following categories of personal information, depending on the services you use:

  • Identification: name, ID number, date of birth.
  • Contact details: phone number, email address, physical address.
  • Medical scheme / insurance: membership details where applicable.
  • Clinical information: medical history, treatment records, clinical notes, test results and related healthcare information.
  • Billing information: invoices, receipts, and payment records.

3. How We Use Your Information

  • Provide diagnosis, treatment, and continuity of care.
  • Maintain accurate clinical and administrative records.
  • Process claims, manage billing, and administer accounts.
  • Communicate appointment reminders, results, and clinically relevant updates.
Important: We do not sell or rent patient information.

4. Data Sharing

We may share personal information with third parties only when necessary for healthcare delivery, operations, or legal compliance. This can include medical schemes, laboratories, pharmacies, referred practitioners, and approved IT/service providers. Where third parties process information on our behalf, appropriate confidentiality and security obligations are required.

5. Retention

We retain records in line with healthcare requirements and good clinical governance. As a general guide:

  • Adults: minimum 6 years.
  • Minors: until age 21 and 6 years of inactivity.

6. Your Rights

  • Request access to, and correction of, your personal information.
  • Object to processing in certain circumstances, where applicable.
  • Withdraw consent for non-essential messaging where consent is the basis for processing.
  • Lodge a complaint with the Information Regulator where appropriate.

7. Communication Methods

We may contact you via phone, email, SMS, or WhatsApp for healthcare-related purposes such as appointments, results, follow-ups, and practice notices. You may opt out of non-essential communication at any time.

8. Compliance Enquiries

For privacy or compliance enquiries, contact: compliance@4fr.co.za