Privacy Policy

Who is responsible

Tammy Reader, HPCSA-registered biokineticist, is the responsible party. It is a one-person practice, so questions about your information go to her on +27 72 128 5821, WhatsApp, or contact form.

Two kinds of information

Website visitors and people sending an enquiry share contact details and a message so the practice can reply and book. That is not a clinical file.

Patients have a clinical record: identifiers, medical history, referral letters, scans and reports, assessment findings, treatment notes, and the invoicing details needed for your account and medical-aid claim.

What I collect

From an enquiry: name, cell number, email, how you heard about the practice, and your message. The form also uses a security check so automated spam can be blocked.

From patients: the enquiry details above, plus the identifiers needed for your file, medical-aid details for invoicing, and health information required to assess and treat you safely.

Technical data from running the website (for example pages visited, approximate location derived by analytics, and security tokens) may be processed by the operators listed below. Nothing is collected beyond what these purposes need.

Why it is processed

Enquiries are processed so the practice can answer you and offer an appointment.

Health information is processed to assess and treat you, to keep the clinical records the HPCSA requires of a registered practitioner, to invoice you, and to communicate about appointments and your programme. POPIA allows a healthcare professional to process health information for those treatment and record-keeping purposes. Consent is confirmed at your first assessment where it fits; clinical records are not kept on a “consent only” basis, because HPCSA rules still require the file to be retained after you leave.

Health information is special personal information

POPIA treats health details as special personal information. Yours is used for your treatment and care, under the confidentiality obligations and ethical rules that bind an HPCSA-registered healthcare professional. It is never sold or used for third-party marketing.

Children and young people

If a patient is under 18, a parent or guardian (a competent person) must book, consent to assessment and treatment, and handle information requests about that file.

Who it is shared with

Only where your care or the law requires it: your referring doctor or other treating practitioners (with your consent), your medical aid via the practice and tariff codes on your invoice, and authorities where disclosure is legally required.

Operators who help run the practice and this website

Cloudflare hosts the website and provides the contact-form security check (Turnstile). Resend delivers enquiry emails from the form to the practice. Google Analytics may run on the live website to understand which pages are used. If you choose to message on WhatsApp, Meta processes that conversation on WhatsApp’s terms.

These operators process only what they need to provide that service. They are not given your clinical notes to market to you.

Information processed outside South Africa

Some of those operators process information on servers outside South Africa. The practice uses them because the website, form, and (if you use it) WhatsApp cannot run without them. No country-by-country “adequacy” claim is made here. Reasonable contracts and the operators’ own safeguards apply.

Cookies and similar technology

Essential cookies and similar storage keep the site working and stop spam on the contact form. On the live website, Google Analytics may set cookies to measure visits. The site does not use advertising networks or sell browsing data.

How long information is kept

Enquiries that do not become a patient file are kept only as long as needed to reply and book, then deleted.

Clinical records are retained as HPCSA guidelines require — for adults, at least six years after the record becomes dormant; for minors, until six years after their 21st birthday — and are then securely destroyed.

How it is protected

Reasonable technical and organisational safeguards protect records: locked storage for paper files and password-protected, access-controlled systems for electronic records. In the unlikely event of a breach, the Information Regulator and affected people will be notified as POPIA requires.

Your rights

You may ask what information the practice holds about you, request that it be corrected, object to processing, or ask for deletion where the law allows. Clinical records that HPCSA rules still require the practice to keep cannot be deleted on request. Contact the practice on +27 72 128 5821, WhatsApp, or contact form.

If you are not satisfied, you may complain to the Information Regulator of South Africa at inforegulator.org.za. The Regulator is the statutory complaints body.

Direct marketing

The practice does not sell your details or send third-party marketing. Appointment messages relate to your care.

Changes to this policy

The current version is always published at privacy policy. The date at the top is updated when the wording changes.