Privacy Policy

Who is responsible for your information

The responsible party under the Protection of Personal Information Act, 2013 (POPIA) is the practice of Dr Nomathemba Chandiwana, Cape Town, South Africa. You can reach the practice at hello@askdrnomathemba.africa for any privacy-related question or request.

What we collect and why

When you book or attend a consultation we collect personal information such as your name, contact details and appointment details, and special personal information such as your health and medical history, medications and test results.

We collect only what is needed to provide you with safe medical care, manage your bookings, issue prescriptions where clinically appropriate, and meet our legal and professional record-keeping duties as a healthcare practice.

Lawful basis under POPIA

We process your personal information with your consent and because it is necessary for the provision of your healthcare. Health information is processed by, or under the responsibility of, a healthcare professional bound by confidentiality, as permitted by section 32 of POPIA.

We do not use your information for marketing, and we do not send unsolicited electronic communications. You will only hear from us about your own bookings and care.

Storage, security and confidentiality

Your information is stored securely with encryption and access restricted to authorised persons, in line with the HPCSA's guidelines on the quality, security and safety of patient information and records, including telehealth consultations.

Consultation records are kept to the same standard as face-to-face consultations and retained for the periods required by HPCSA record-keeping guidance, after which they are securely destroyed.

Patient confidentiality is a professional duty. Your information is not disclosed except with your consent, where the law requires it, or in the limited circumstances recognised by HPCSA confidentiality guidelines.

Who we share it with

We share the minimum necessary information only where it is needed for your care or to run the practice: for example with a pharmacy you choose when a prescription is issued, with secure technology providers who host our booking and records systems under confidentiality obligations, or with other practitioners involved in your care at your request.

We never sell your information.

Your rights

Under POPIA you may ask to access, correct or delete your personal information, object to certain processing, and withdraw consent where processing is based on consent (subject to legal record-keeping duties for medical records).

To exercise any of these rights, email hello@askdrnomathemba.africa. We will respond within a reasonable time.

If you are not satisfied, you may lodge a complaint with the Information Regulator (South Africa): Information Regulator, JD House, 27 Stiemens Street, Braamfontein, Johannesburg; enquiries@inforegulator.org.za; complaints.IR@inforegulator.org.za.

Changes to this policy

We may update this policy from time to time. The version on this page, with its date, is the current one. Last updated: August 2026.