Privacy Policy

Medi Connex ("we", "us", or "our") is committed to protecting the privacy and security of your personal information and the personal information of your patients. This Privacy Policy describes how we collect, use, store, and protect information through the Medi Connex platform in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa.

By using Medi Connex, you ("the Responsible Party") acknowledge that you have read, understood, and agree to this Privacy Policy.

Account Information: Name, email address, professional credentials (HPCSA number, practice number), clinic details, and billing information.

Patient Data (entered by you): Patient names, ID numbers, dates of birth, contact details, addresses, medical history, diagnoses, allergies, blood type, medical aid details, and emergency contacts.

Clinical Documents: Prescriptions, sick notes, medical letters, pathology request forms, and associated clinical notes generated through the platform.

Usage Data: Log data, IP addresses, browser type, device information, and feature usage analytics to improve the platform.

Uploaded Files: Clinic logos, doctor signatures, and any other files uploaded to personalise documents.

We use the information collected to:

• Provide and maintain the Medi Connex platform and its features.
• Generate clinical documents (prescriptions, sick notes, letters, pathology forms).
• Enable document verification via QR code scanning.
• Process subscription billing and account management.
• Send service-related communications (account alerts, billing notices).
• Improve platform performance and user experience.
• Comply with legal and regulatory obligations.

We do not sell, rent, or trade your personal information or your patients' information to any third party for marketing purposes.

Medi Connex is designed to assist healthcare practitioners in fulfilling their obligations under POPIA. As the healthcare practitioner using this platform, you are the Responsible Party in respect of your patients' personal information. Medi Connex acts as an Operator processing that information on your behalf.

You are responsible for:

• Obtaining informed consent from patients before capturing their information.
• Ensuring the accuracy of patient data entered into the platform.
• Responding to patient requests regarding their personal information.
• Complying with all applicable POPIA obligations in your practice.

We are responsible for implementing appropriate technical and organisational measures to protect the personal information we process on your behalf.

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Access controls and authentication requirements.
• Regular security assessments and monitoring.
• Secure cloud infrastructure with reputable providers.

While we take all reasonable precautions, no method of electronic storage or transmission is 100% secure. In the event of a data breach that is likely to harm you or your patients, we will notify you as required by POPIA.

We retain your account data and clinical records for as long as your account is active or as necessary to provide our services. Upon account termination, we will retain data for a period of 5 years to comply with medical record-keeping obligations under South African law, after which data will be securely deleted.

You may request deletion of your data at any time, subject to our legal retention obligations.

Medi Connex may use trusted third-party service providers to operate the platform (e.g., cloud hosting, payment processing). These providers are bound by confidentiality agreements and are only permitted to use your data to perform services on our behalf.

We do not share patient data with any third party except as strictly necessary to operate the platform or as required by law.

Under POPIA, you have the right to:

• Access personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your personal information (subject to legal retention requirements).
• Object to processing of your personal information.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise these rights, contact us at info@medibridgegroup.co.za.

Medi Connex uses essential cookies and local storage to maintain your session and preferences. We do not use third-party advertising cookies. By using the platform, you consent to our use of essential cookies.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice within the platform. Continued use of Medi Connex after changes constitutes acceptance of the updated policy.

For privacy-related queries or to exercise your rights, contact our Information Officer: