PRIVACY POLICY
1.1 Purpose
Dr Darren Carpenter’s Chinese Medicine and Acupuncture Practice operates the www.drcarpenter.co.za website (here after referred to as the “Service”)
This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the Service and tells You about Your privacy rights and how the law protects you.
We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
1.2 Definitions
1.2.1. Competent person means any person who is legally competent to consent to any action or decision being taken in respect of any matter concerning a child (i.e., the child’s legal guardian)
1.2.2. Consent means any voluntary, specific, and informed expression of will in terms of which permission is given for the processing of personal information.
1.2.3. Data subject means the person to whom personal information relates.
1.2.4. Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
1.2.5. Direct marketing means to approach a data subject, either in person, by mail or electronic communication, for the direct or indirect purpose of:
-
promoting, or offering to supply, in the ordinary course of business, any goods or services to the data subject,
-
requesting the data subject to make a donation of any kind and for any reason.
​
1.2.6. Electronic communication means any text, voice, sound, image, or message, sent over an electronic communications network, which is stored in the network or in the recipient's terminal equipment, until it is collected by the recipient.
1.2.7 Filing system means any structured set of personal information, whether centralised, decentralised, or dispersed, on a functional or geographical, basis, which is accessible according to specific criteria.
1.2.8. Information officer of, or in relation to, a:
-
public body means an information officer or deputy information officer, as contemplated in terms of section 1 or 17 of the PAIA.
-
private body means the head of a private body, as contemplated in section 1 of the PAIA.
​
1.2.9. Operator means a person who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that party. Which in the case of this practice is Wanda Human.
​
1.2.10. Person means a natural person or a juristic person.
​
1.2.11. Personal information means information about an identifiable, living, natural person, and, where it is applicable, an identifiable, existing juristic person, including, but not limited to:
-
information about the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language, and birth of the person
-
information relating to the educational, medical, financial, criminal or employment history of the person
-
any identifying number, symbol, e-mail address, physical address, telephone number, location information, online identifier, or other particular assignment to the person
-
the biometric information of the person
-
the personal opinions, views or preferences of the person
-
correspondence sent by the person that is implicitly or explicitly of a private or confidential nature, or further correspondence that would reveal the contents of the original correspondence
-
the views or opinions of another individual about the person
-
the name of the person if it appears with other personal information about the person or if the disclosure of the name itself would reveal information about the person
​
1.2.12. Private body means:
-
a natural person who carries or has carried on any trade, business, or profession but only in the capacity as a natural person.
-
a partnership which carries or has carried on any trade, business, or profession.
-
any former or existing juristic person but excludes a public body.
​
1.2.13. Processing means any operation or activity or any set of operations, whether or not by automatic means, pertaining to personal information, including:
-
the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation, or use.
-
dissemination by means of transmission, distribution, or making available in any other form.
-
merging, linking, restriction, degradation, erasure, or destruction of information.
​
1.2.14. Public body means:
-
any department of state or administration in the national or provincial sphere of government, or any municipality in the local sphere of government.
-
any other functionary or institution when:
-
exercising a power or performing a duty in terms of the Constitution or a provincial constitution.
-
exercising a public power or performing a public function in terms of any legislation.
-
​
1.2.15. Public record means a record that is accessible in the public domain and which is in the possession of, or under the control of, a public body, whether or not it was created by that public body.
​
1.2.16. Record means any recorded information:
-
regardless of form or medium, including:
-
writing on any material.
-
information produced, recorded or stored by means of any tape-recorder, computer equipment, whether hardware, or software or both, or other device, and any material subsequently derived from information produced, recorded or stored.
-
label, marking or other writing that identifies or describes anything of which it forms part or to which it is attached, by any means.
-
book, map, plan, graph or drawing.
-
photograph, film, negative, tape or other device, in which one (1) or more visual images are embodied to be capable, with or without the aid of some other equipment, of being reproduced.
-
-
in the possession or under the control of a responsible party.
-
whether or not it was created by a responsible party
-
regardless of when it came into existence.
​
1.2.17. Regulator means the Information Regulator, established in terms of section 39 of the POPI Act
1.2.18. Re-identify and re-identified, in relation to personal information of a data subject, means to resurrect any information that has been de-identified that:
-
identifies the data subject,
-
can be used or manipulated by a reasonably foreseeable method to identify the data subject,
-
can be linked by a reasonably foreseeable method to other information that identifies the data subject.
1.2.19. Responsible party means a public or private body, or any other person which, alone or in conjunction with others, determines the purpose of and means for processing personal information.
​
1.2.20. Restriction means to withhold or restrict from circulation, use or publication, any personal information that forms part of a filing system but not to delete or destroy the information.
​
1.2.21. Service means the website www.drcarpenter.co.za
​
1.2.22. Service Provider means any natural or legal person who processes the data on behalf of the Therapist. It refers to third-party companies or individuals employed by the Therapist to facilitate the Service, to provide the Service on behalf of the Therapist, to perform services related to the Service.
1.2.23. Special personal information means personal information, as referred to in section 26 of the POPI Act:
-
religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health, sex life or biometric information of a data subject,
-
criminal behaviour of a data subject, to the extent that the information relates to:
-
alleged commission by a data subject of any offence,
-
proceedings about any offence allegedly committed by a data subject or the disposal of those proceedings.
-
1.2.25. Therapist (referred to as "the Therapist") means Dr Darren Carpenter.
​
1.2.26. Unique identifier means any identifier that is assigned to a data subject and is used by a responsible party for the purposes of the operations of that responsible party and that uniquely identifies that data subject for that responsible party.
​
1.2.27. Website means www.drcarpenter.co.za
​
1.2.28. You means the individual accessing or using the Service
​
1.3. Collection and use of Personal information
​1.3.1. Information
-
We collect several different types of information for various purposes to provide and improve our Service to you.
​
1.3.2. Personal Information
-
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
-
Full name/s
-
Surname
-
ID Number
-
Marital Status
-
Contact Number
-
Email address
-
Occupation
-
Home Language
-
Residential Address
-
Current Medications
-
Allergies
-
Medical Aid details
-
Next of Kin details
-
Usage Data
-
​
1.3.3. Usage Data
-
Usage Data is collected automatically when using the Service.
-
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
-
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
-
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
​
​
1.4. Use of Your Personal Data
​
-
The therapist may use Personal Data for the following purposes:
-
To provide and maintain our Service, including to monitor the usage of our Service.
-
For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
-
To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobil application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
-
To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
-
To manage Your requests: To attend and manage Your requests to Us.
-
-
The therapist may also share Personal Data for the following purposes
-
The law on medical aids forces the Practice to provide certain information to the medical aid. Your invoice will therefore include personal information, specific treatment codes and diagnostic codes.
-
When we receive an order from a court to disclose your information, we have no choice but to provide it. Or when a specific law (legislation/regulation) makes it compulsory to report things such as TB, cancer or child abuse/neglect.
-
Communication with other relevant health professionals, insofar as it is necessary and in the interests of your child. Signed consent will be obtained for this
-
With Your consent: We may disclose Your personal information for any other purpose with Your consent.
-
​
1.5. Retention of Your Personal Data
Certain legislation specifies requirements for documents that must be retained, as well as how long those documents must be retained, some of which are detailed below.
​
1.5.1. HPCSA guidance
-
Records should be kept for at least 6 years after they become dormant
-
The records of minors should be kept until the minor’s 21st birthday, subject to the ordinary dormancy requirements above once the 21-year threshold is met
-
The records of patients who are mentally impaired should be kept until the patient's death
-
In terms of the Occupational Health and Safety Act (Act No. 85 of 1993) health records must be kept for a period of 20 years after treatment of an associated injury.​
​
1.6. Processing of Data
​1.6.1. Your information, including Personal Data, is processed at the Therapists operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located in these areas
1.6.2. The Therapist will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country without your consent or as there are adequate controls in place including the security of Your data and other personal information.
​
1.7. Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services. We use such third party tools and websites as:
-
Facebook (Facebook Privacy Policy)
-
Google Analytics
-
Google Cloud (Google Privacy Policy)
-
WhatsApp (Privacy Policy (whatsapp.com))
​
1.8. Changes to this Privacy Policy
-
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
-
We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.
-
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.​
1.9.Contact Us
If you have any questions about this Privacy Policy, You can contact us:
-
By email: info@drcarpenter.co.za
-
By phone: 063 169 8802​