Privacy Policy for the MedSquirrel Website
1 Introduction
1.1
Any capitalised terms have the meanings ascribed to them in the Website Terms and Conditions.
1.2 This is the Privacy Policy applicable to your
personal information, collected by MedSquirrel (Pty) Ltd (MedSquirrel)
through its website, www.medsquirrel.co.za (Website).
1.3 MedSquirrel respects privacy rights and complies
with all laws in respect of the handling of all personal information,
including collection, use, storage, sharing and disposal.
1.4 This Privacy Policy aims to help you understand
how MedSquirrel handles personal information when you use the
Website.
1.5 This Privacy Policy does not apply to any third
party websites which may be accessible through links on the
Website. MedSquirrel makes no representations or warranties about
the privacy practices of any third party and does not accept any
responsibility for the privacy practices of, or content displayed on,
third party websites. Third party website providers are
responsible for informing you about their own privacy practices.
2 What personal information does MedSquirrel handle?
2.1 When used in this Privacy
Policy, the term “personal information” has the meaning given to it in
the Protection of Personal Information Act, 2013 (POPI).
Generally speaking, personal information is any information that can be
used to personally identify a natural or juristic person.
2.2 Personal information that MedSquirrel collects,
when you register for the Website, may include your name, address,
registration / VAT / identity numbers, contact details and, in the case
of medical professionals, your practice number.
2.3 If the information that MedSquirrel collects
personally identifies you MedSquirrel will treat it as personal
information.
3 How does MedSquirrel collect personal information?
3.1 MedSquirrel collects personal information directly from you in the following ways, namely:
(1) through your registration for, access to and use of the Website;
(2) when you, as a user, upload and store information onto your profile;
(3) when you, as a medical practitioner, link your website to the Website; and
(4) when you communicate with MedSquirrel .
4 What if you do not provide personal
information requested by MedSquirrel or allow MedSquirrel to collect
personal information?
If you do not provide MedSquirrel with personal information where
MedSquirrel requires it, you will not be able to register on, or use
certain of the features of, the Website.
5 For what purposes does MedSquirrel handle personal information?
MedSquirrel collects personal information and handles it for the purposes of:
(1) registering you on the Website;
(2) enabling you to use certain Website features
(3) meeting legal or other regulatory obligations imposed on it;
(4) updating its records; and
(5) processing and responding to any queries.
6 Who does MedSquirrel disclose personal information to?
6.1 MedSquirrel may disclose personal information to:
(1) its
employees, affiliates, contractors or third party service providers in
connection with the Website and the services that it provides to you,
including its information technology service providers;
(2) its insurers and professional advisors, including its accountants, business advisors and consultants;
(3) employees and other relevant people
connected with any entity with which MedSquirrel merges, combines or to
which it divests a part or the whole of its business;
(4) law enforcement or regulatory bodies as required by law; and
(5) any other juristic or natural person for any authorised purpose with your express consent.
6.2 MedSquirrel undertakes never to sell personal information.
7 Does Medsquirel disclose personal information to anyone outside South Africa?
7.1 Medsquirel may need to transfer
personal information to, or store it with, third party suppliers and
service providers, such as hosting or information technology service
providers, located outside of South Africa for some of the purposes
listed above.
7.2 Where personal information is transferred outside
of South Africa, your rights and the rights of your customers and your
directors/members will continue to be respected and MedSquirrel will
take all reasonable steps to ensure transferred personal information is
kept secure and receives a similar level of protection as that which it
receives in South Africa.
8 Security and data quality
8.1 MedSquirrel may hold personal
information in either electronic or hard copy form. In both cases
MedSquirrel takes reasonable and appropriate steps to ensure that the
personal information is protected from misuse and loss and from
unauthorised access, modification or disclosure.
8.2 Personal information is destroyed or
de-identified when no longer needed or when MedSquirrel is no longer
required by law to retain it (whichever is the later).
9 How can you access and correct your personal information?
9.1 You have the right to contact MedSquirrel at any time requesting:
(1) confirmation that MedSquirrel has the personal information;
(2) access to the records containing the
personal information or a description of the personal information that
we hold; and
(3) the identity or categories of third parties
who have had, or currently have, access to the personal
information.
9.2 When making a request MedSquirrel requires
adequate proof of identity which will include providing a certified
copy of identity / registration documents.
9.3 MedSquirrel will try to provide any person
entitled to access their personal information with suitable means of
accessing information, by for example, posting or emailing it to them.
9.4 MedSquirrel may charge a reasonable fee to cover
its administrative and other reasonable costs in providing personal
information requested.
9.5 There may be instances where MedSquirrel cannot
grant access to personal information. For example, if granting
access would interfere with the privacy of others or would result in a
breach of confidentiality, MedSquirrel may need to refuse access.
If MedSquirrel refuses access, it will give written reasons for its
refusal.
9.6 If you believe that any personal information that
MedSquirrel holds about you is inaccurate, irrelevant, outdated,
incomplete or misleading, you may request MedSquirrel to correct
it. If you believe that any personal information that MedSquirrel
holds about you is excessive or has been unlawfully obtained or that
MedSquirrel is no longer authorised to retain the information, you may
request that MedSquirrel destroys or deletes it. MedSquirrel will
consider if the information requires correction, deletion or
destruction and if MedSquirrel does not agree that there are grounds
for such action, you may require MedSquirrel to note your request.
10 Changes to personal information
Should your personal information change, please
inform MedSquirrel and provide MedSquirrel with all changes as soon as
reasonably possible to enable MedSquirrel to update the personal
information. It is your responsibility to ensure that all
personal information is kept up to date as MedSquirrel has no way of
doing so directly.
11 Unlawful access to personal information
11.1 If you believe that your
personal information has been unlawfully accessed or acquired, you may
contact MedSquirrel using the contact information below and provide
details of the incident so that MedSquirrel can investigate it.
11.2 MedSquirrel will treat such queries
confidentially (unless otherwise required by law), investigate them and
aim to achieve resolution within a reasonable time.
12 Indemnity
12.1 You must ensure that you are permitted to disclose the information you upload or provide on the Website.
12.2 MedSquirrel and its employees, directors or
agents will not be liable for, and you indemnify and hold MedSquirrel
and its employees, directors or agents harmless against, any loss or
harm, direct, indirect or consequential, arising from, or connected to
the use of the personal information or the disclosure to MedSquirrel of
such personal information by you.
13 Contact information
If any person has questions about this Privacy Policy
or needs to contact MedSquirrel in connection with their personal
information, they may contact MedSquirrel’s Information Officer using
the details set out below.
Name: Mr Ryan Burns
Email: ryan{at}medsquirrel.co.za
14 Changes to Privacy Policy
MedSquirrel reviews its policies regularly and
occasionally may need to change or update them. Any updated
versions of this Privacy Policy will be posted on the Website and will
be effective from the date of posting. You must check the Privacy
Policy regularly for updates. This Privacy Policy was last
reviewed and updated on 11 October 2017.