POPIA Privacy Policy & Protection of Patient Health Information
Last updated: November 2026
Drafted in accordance with the Protection of Personal Information Act (POPIA, Act 4 of 2013 Sections 18, 26, 27 & 32), the National Health Act (Act 61 of 2003), and HPCSA Booklet 5 (Confidentiality: Protecting and Providing Information).
1. Statutory Scope & POPIA Section 26/32 Health Data Protection
Terranova Medics (Dr C. Mbowane, HPCSA Reg. No. MP 9599727, BHF Practice No. 0904813) is committed to protecting the privacy, dignity, and confidentiality of every patient. Under Sections 26 and 32 of the Protection of Personal Information Act 4 of 2013 (POPIA), information concerning a patient's physical or mental health, medical history, diagnostic test results, pregnancy status, and treatment constitutes Special Personal Information that may only be processed by a registered healthcare professional bound by statutory confidentiality.
All clinical records generated during in-person or virtual consultations at Windmill Centre, Shop No. 2, 250 Barney Molokwane Street, Trichardt are processed strictly for clinical diagnosis, continuity of medical care, pathology/radiology referrals, occupational health certification (where authorised), and medical aid scheme claim administration.
2. Section 18 Notification: Categories of Personal Information Collected
In compliance with POPIA Section 18, we collect and process: (a) identifying details (full name, South African ID or passport number, date of birth, and gender); (b) contact details (residential address, telephone number, WhatsApp number, and email address); (c) billing and medical scheme details (medical aid scheme name, membership number, dependant code, or in-house subscription plan records); and (d) clinical records (medical history, vital signs, examination notes, ultrasound findings, pathology results, ICD-10 diagnostic codes, and prescriptions).
Supplying clinical and identification information is necessary to provide safe medical care and to submit claims to your medical scheme where applicable.
3. WhatsApp Booking & Electronic Communication Safeguards
When you use our website booking form or message our reception on WhatsApp (082 968 5275), we process your contact details solely to schedule and confirm your consultation. We advise patients not to transmit sensitive clinical test results or intimate medical details over initial unencrypted booking messages; detailed clinical history is recorded securely during your consultation.
4. Disclosure to Third Parties & Medical Aid Schemes
Patient health information is never sold or shared for third-party marketing. Information is disclosed only: (a) to accredited pathology laboratories, radiology practices, or specialist physicians when a clinical referral is made with your consent; (b) to your nominated South African medical scheme (including ICD-10 codes required by law for claim reimbursement and PMB chronic registration); or (c) where required by a court order or public health statute.
5. Data Retention, Patient Rights & Information Regulator Contact Details
In accordance with HPCSA Booklet 9 (Guidelines on the Keeping of Patient Records), clinical records are retained securely for a minimum of six (6) years from the date of last entry, or until a minor patient reaches the age of twenty-one (21) years. Data subjects have the right to request access to, correction of, or lawful deletion of personal information by contacting our Information Officer, Dr C. Mbowane, at info@terranovamedics.co.za or 017 518 0169.
If you believe your privacy rights under POPIA have been infringed, you have the right to lodge a complaint with the Information Regulator (South Africa) at JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001, or via email at POPIAComplaints@inforegulator.org.za / inforeg@justice.gov.za.