Privacy Policy

Last updated: 27 July 2026

Dr Y Joosab Medical Practice (“the Practice,” “we,” “us”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This policy explains what information we collect, why, how we use it, and what rights you have.

Who we are

Dr Y Joosab Medical Practice operates from two locations:

  • 175 Nyala Road, Suite 3, L Section, KwaMashu, Durban, 4359 — 031 501 1033
  • 122 Crescent Street, Shop 4, Overport, Durban, 4091 — 031 271 3056

Email: info@drjoosab.co.za

Our Information Officer

Our Information Officer is registered with the Information Regulator of South Africa and is responsible for ensuring our compliance with POPIA, and for handling any queries, complaints, or requests relating to your personal information.

What personal information we collect

Depending on how you interact with us (visiting our website, contacting us, or receiving care at our practice), we may collect:

  • Contact details: name, phone number, email address
  • Appointment and booking information
  • Medical aid scheme and membership details
  • Health information, including medical history, diagnoses, treatment records, and test results (“special personal information” under POPIA)
  • Identity number, where required for medical aid claims or record-keeping
  • Technical information from your use of this website, such as IP address and browsing behaviour (see our Cookie Notice below)

Why we collect it

We use your personal information to:

  • Provide safe and appropriate medical care
  • Manage appointments, bookings, and reminders
  • Process medical aid claims and billing
  • Communicate with you about your care
  • Comply with our legal and professional obligations, including HPCSA record-keeping requirements
  • Improve our website and services

We do not use your health information for marketing purposes, and we do not sell or rent your personal information to any third party.

Special personal information (health data)

As a medical practice, we process health information under the exceptions provided in POPIA for medical professionals and healthcare institutions providing patient care. This information is:

  • Accessed only by staff directly involved in your care or practice administration
  • Retained in line with the retention period required by the HPCSA and applicable health record regulations
  • Not disclosed to third parties without your consent, except where required by law, for medical aid claims, or in a medical emergency

Who we may share your information with

We may share limited information with:

  • Your medical aid scheme, for claims purposes
  • Other healthcare providers, where necessary for your ongoing care (e.g. referrals)
  • Service providers who support our practice operations (e.g. practice management software, hosting providers), under confidentiality obligations
  • Regulatory bodies, where required by law (e.g. HPCSA, Department of Health)

We do not transfer your personal information outside South Africa unless a service provider we use requires it, and only where equivalent data protection safeguards are in place.

How long we keep your information

We retain medical records for the period required by the HPCSA and South African health record-keeping regulations (generally a minimum of 6 years from the last date of treatment, longer for minors). Website enquiry data not linked to a patient file is retained only as long as necessary to respond to your query.

Your rights under POPIA

You have the right to:

  • Request confirmation of what personal information we hold about you
  • Request access to your personal information, including your medical records
  • Request correction of inaccurate or outdated information
  • Object to the processing of your personal information, in certain circumstances
  • Request that we delete or destroy personal information we are not legally required to keep
  • Lodge a complaint with the Information Regulator if you believe we have not complied with POPIA

To exercise any of these rights, contact our Information Officer using the details above.

Website forms and enquiries

When you submit a form on this website (such as a contact or booking enquiry), we only use the information provided to respond to your request. We do not add you to any marketing list without your separate, explicit consent.

Cookies and website analytics

This website may use cookies and similar technologies to understand how visitors use the site and to improve your experience. See our [Cookie Notice] for details on what we use and how to manage your preferences.

Security

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, or disclosure, in line with POPIA’s security safeguard requirements.

Complaints

If you have a concern about how we handle your personal information, please contact our Information Officer first. If you remain unsatisfied, you may lodge a complaint with:

The Information Regulator (South Africa) Email: complaints.IR@justice.gov.za Website: www.justice.gov.za/inforeg/

Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date at the top of this page will reflect the most recent revision.