Chekup247
Get Started
Statutory Compliance

POPIA Privacy Notice & Health Data Policy

In strict accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and National Health Act 61 of 2003. Last Updated: September 2026.

South African National Data Residency Guarantee

ChekUp247 (Pty) Ltd processes and stores all patient medical records, clinical notes, ICD-10 diagnostic entries, and identity documentation within high-security South African data centers (AWS af-south-1 region, Cape Town). We never transfer special personal health information cross-border without explicit statutory authorization.

1. Identification of the Responsible Party & Information Officer

ChekUp247 (Pty) Ltd (Registration Number 2024/098765/07) is the “Responsible Party” for platform operational and billing data. Attending independent medical practitioners are separate and independent Responsible Parties regarding clinical diagnostic notes and treatment records created during consultations.

Information Officer: Adv. Monica Van Der Merwe

Physical Address: 150 West Street, Sandton, Johannesburg, 2196

Privacy Enquiries: privacy@chekup247.co.za | popia@chekup247.co.za

2. Categories of Personal & Special Personal Information Collected

In order to deliver seamless telehealth consultations and legal prescription fulfillment, we process:

  • General Personal Information: Full legal name, South African ID number or passport number, telephone number, residential address, emergency contact details, and payment transaction metadata.
  • Special Personal Information (Section 26 & 32 of POPIA): Health symptoms, medical history, past surgical notes, current medications, recorded clinical impressions, WHO ICD-10 diagnostic classifications, and digital prescriptions.
  • Practitioner Credential Data: HPCSA registration numbers, Board of Healthcare Funders (BHF) practice numbers, certified qualifications, and medical malpractice indemnity certificates.

3. Lawful Basis and Purpose of Processing

We process your personal and health information under POPIA Section 11(1) and Section 32 (Special Personal Information relating to Health):

  • To enable clinical consultation, diagnosis, and medical advice by licensed healthcare professionals.
  • To generate legal, tamper-evident e-prescriptions conforming to the Medicines and Related Substances Act 101 of 1965.
  • To furnish patients with itemized receipts with doctor practice numbers and ICD-10 codes for medical scheme reimbursement.
  • To process secure escrow payments through our PCI-DSS Level 1 payment gateway (Paystack).
  • To prevent fraud, identity theft, and prescription tampering.

4. Video Consultation Confidentiality & Audio Streams

All video and audio consultations between you and the doctor are encrypted using WebRTC technology (powered by Daily.co). Video and audio streams are never recorded or stored on our servers. The consultation is strictly real-time and confidential between patient and attending physician.

5. Data Subject Rights under Sections 23 to 25 of POPIA

As a patient and data subject, you hold the following statutory rights under South African law:

  • Right of Access: You may request confirmation of whether we hold personal or health information about you and receive a copy thereof (subject to statutory identification verification).
  • Right of Rectification: You may request correction or updating of inaccurate, irrelevant, or outdated personal information.
  • Right of Erasure / Destruction: You may request deletion of non-clinical account data. Note that clinical consultation notes and issued prescription records are subject to statutory HPCSA retention rules (minimum 6 years for adult medical records).

6. Information Regulator Complaints

If you believe your personal information has been handled in contravention of POPIA, you have the right to lodge a formal complaint with the South African Information Regulator:

The Information Regulator (South Africa)

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Complaints: complaints.IR@justice.gov.za | General: inforeg@justice.gov.za