Privacy Notice

Introduction

K&K Medical and Dental ("the Organisation") is committed to protecting and respecting your privacy when dealing with your personal information. This Privacy Notice sets out the basis on which any personal information we collect from you, or that you provide to us, is used, stored, disclosed, and processed. Please read the following carefully to understand our practices regarding your personal information, how we will treat it, and your rights in relation to that information. By providing your personal information to the Organisation or by using our services, website, or other online platforms, you are accepting or consenting to the practices described in this Privacy Notice.

Personal Information

When we refer to personal information in this Notice, we mean information relating to an identifiable, living, natural or juristic person, as defined in the Protection of Personal Information Act, 2013 ("POPIA"). The Organisation may hold and use personal information about you as a patient, client, supplier, employee, tenant, or in any other capacity, in accordance with POPIA and national health laws. Depending on the services you receive, this may include special personal information, such as information relating to your health.

Collection of Personal Information

The Organisation may collect information about you when you are admitted as a patient, register as a client, book to receive medical or dental services, are referred by a doctor or other organisation, visit our website, apply for employment, enquire about services, use or request online services, fill in forms or surveys, carry out transactions, participate in promotions, make payments, or contact us via email, telephone, or social media. Calls to the Organisation may be monitored or recorded for training and quality purposes.

Lawful Basis for Processing

To process your information in accordance with POPIA, the Organisation must establish a lawful basis, which may include your consent, the necessity of processing for the performance of a contract or compliance with a legal obligation, or the protection of legitimate interests. Special personal information, such as health data, may be processed if necessary for your treatment and care, for the administration of healthcare services, or where required by law. The National Health Act permits disclosure in certain circumstances, including where you consent in writing, where a court order requires disclosure, or where non-disclosure represents a serious threat to public health.

Security and Storage

Your personal information will be kept confidential and secure and will only be used for the purposes for which it was collected. The Organisation has appropriate organisational and technical measures in place to prevent unauthorised access, unlawful processing, or loss of personal information. While we endeavour to ensure robust security, electronic transmission methods such as email or instant messaging carry inherent risks, and if you choose to use these methods, you acknowledge that processing in this manner will be at your own risk.

Disclosure of Personal Information

The Organisation may disclose your personal information to healthcare providers, clinicians, and staff involved in your treatment, to medical schemes and insurers for authorisation and payment, to professional advisors and auditors, to regulators such as the Department of Health or the Health Professions Council of South Africa, and to service providers supporting IT systems, storage, or confidential destruction. Information may also be shared with attorneys or debt recovery agents in relation to outstanding accounts, and with investigators in the event of incidents related to your treatment. All disclosures are limited to what is necessary and subject to confidentiality undertakings.

Transfers Outside South Africa

Personal information collected by the Organisation may be transferred to, and stored at, destinations outside South Africa. Where such transfers occur, we will ensure that adequate protections are in place in accordance with POPIA. By submitting your personal information, you agree to such transfer, storage, or processing.

CCTV and Monitoring

Certain premises of the Organisation may be monitored by CCTV for the purposes of security and the safe provision of care. Images and recordings may be retained securely for a limited period. Machine monitoring may also be applied to ensure improved safety and security.

Artificial Intelligence and Analytics

The Organisation may use artificial intelligence (AI) and analytical tools to streamline administrative processes, conduct data analysis, and identify trends. All data processed through AI will be handled with confidentiality and in compliance with applicable privacy laws. Anonymous or aggregated information may be used for statistical, historical, or research purposes.

Your Rights

You have the right to access personal information held about you, to request correction or deletion of inaccurate or outdated information, to restrict processing, to object to processing in certain circumstances, to request portability of your information, and to withdraw consent previously given without affecting the lawfulness of prior processing. You also have the right not to be subject to automated decision-making without appropriate safeguards. These rights are not absolute and may be limited by law. Requests to exercise these rights must be submitted in writing to the Organisation's Information Officer.

Complaints

If you believe that your personal information is not being processed lawfully, you may lodge a complaint with the Organisation's Information Officer. If you remain dissatisfied, you have the right to escalate the matter to the Information Regulator of South Africa.

Your Obligations

You are responsible for ensuring that the personal information you provide to the Organisation is accurate and up to date. Where you provide information about next of kin or dependents, you must ensure that they do not object to the provision and processing of their information.

Information Officer Contact

For all queries, requests, or complaints relating to this Privacy Notice or the processing of your personal information, please contact:

Changes to This Notice

The Organisation keeps this Privacy Notice under regular review and may amend it from time to time without prior notice. The latest version will always be available upon request or on our official communication platforms.