← Back to Home

Privacy Policy

Aafiya Med (Pty) Ltd ("we", "our", "us") is committed to protecting your privacy and complying with the Protection of Personal Information Act, 2013 (POPIA). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website aafiya.app and interact with our services.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

• Fill out contact forms (name, email, organisation, enquiry details)
• Subscribe to our newsletter (email address)
• Apply for career opportunities (as provided in application)
• Communicate with us via email

1.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system
• IP address (anonymised)
• Pages visited and time spent
• Referring website

Note: Our website is hosted on Cloudflare, which provides basic analytics. We do not use third-party tracking cookies or advertising networks.

2. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and partnership requests
• Send you updates about SAHPRA approval, NHI partnerships, and major milestones (if you subscribe)
• Improve our website and services
• Comply with legal obligations
• Evaluate job applications

Legal Basis (POPIA): We process your personal information based on:

• Consent: When you submit forms or subscribe to updates
• Legitimate Interest: To respond to enquiries and improve our services
• Legal Obligation: To comply with South African law

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information with:

• Service Providers: Web3Forms (contact form processing), Cloudflare (hosting and CDN)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are required to maintain appropriate security measures and may only use your information as instructed by us.

4. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• HTTPS encryption for all data transmission
• Content Security Policy (CSP) headers
• Secure form submission via encrypted channels
• Regular security reviews

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Contact form enquiries: 2 years from last contact
• Newsletter subscriptions: Until you unsubscribe
• Job applications: 1 year from application date

6. Your Rights Under POPIA

You have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal obligations)
• Objection: Object to processing of your information
• Restriction: Request restriction of processing
• Portability: Receive your information in a structured, machine-readable format
• Withdraw Consent: Withdraw consent at any time (does not affect lawfulness of prior processing)

To exercise any of these rights, contact our Information Officer at privacy@aafiya.app

7. Cookies and Tracking

Our website uses minimal cookies:

• Essential Cookies: Required for contact form functionality and session management
• Consent Cookie: Stores your cookie consent preference (localStorage)

We do NOT use:

• Third-party advertising cookies
• Social media tracking pixels
• Cross-site tracking

You can disable cookies in your browser settings, but this may affect website functionality.

8. Third-Party Links

Our website contains links to third-party websites (e.g., care.aafiya.app, secondopinion.aafiya.app, pathlab.aafiya.app). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

9. Children's Privacy

Our corporate website is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information is stored on servers located in South Africa and the European Union (via Cloudflare). We ensure appropriate safeguards are in place for any international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our website after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your POPIA rights:

Complaints

If you believe we have not complied with POPIA, you may lodge a complaint with the Information Regulator of South Africa:

Information Regulator (South Africa)
JD House, 27 Stiemens Street
Braamfontein, Johannesburg, 2001
Email: inforeg@justice.gov.za
Website: justice.gov.za/inforeg

---

© 2026 Aafiya Med (Pty) Ltd. All rights reserved.
Return to Home